# Flog Txt Version 1 # Analyzer Version: 2.2.0 # Analyzer Build Date: Jan 15 2018 17:39:08 # Log Creation Date: 17.01.2018 13:10:23.493 Process: id = "1" image_name = "crypt.exe" filename = "c:\\users\\5jghkoaofdp\\desktop\\crypt.exe" page_root = "0xc9db000" os_pid = "0xaf8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe\" " cur_dir = "C:\\Users\\5JgHKoaOfdp\\Desktop\\" os_username = "FIVAUF\\5JgHKoaOfdp" os_groups = "FIVAUF\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000befc" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1 start_va = 0x140000 end_va = 0x1b3fff entry_point = 0x140000 region_type = mapped_file name = "crypt.exe" filename = "\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\crypt.exe") Region: id = 2 start_va = 0x1c0000 end_va = 0x1dffff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 3 start_va = 0x1e0000 end_va = 0x1e0fff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 4 start_va = 0x1f0000 end_va = 0x1fefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 5 start_va = 0x200000 end_va = 0x23ffff entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 6 start_va = 0x240000 end_va = 0x33ffff entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 7 start_va = 0x340000 end_va = 0x343fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000340000" filename = "" Region: id = 8 start_va = 0x350000 end_va = 0x350fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000350000" filename = "" Region: id = 9 start_va = 0x360000 end_va = 0x361fff entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 10 start_va = 0x77550000 end_va = 0x776b7fff entry_point = 0x77550000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 11 start_va = 0x7ed40000 end_va = 0x7ed62fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ed40000" filename = "" Region: id = 12 start_va = 0x7ed63000 end_va = 0x7ed63fff entry_point = 0x0 region_type = private name = "private_0x000000007ed63000" filename = "" Region: id = 13 start_va = 0x7ed6a000 end_va = 0x7ed6cfff entry_point = 0x0 region_type = private name = "private_0x000000007ed6a000" filename = "" Region: id = 14 start_va = 0x7ed6d000 end_va = 0x7ed6dfff entry_point = 0x0 region_type = private name = "private_0x000000007ed6d000" filename = "" Region: id = 15 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 16 start_va = 0x7fff0000 end_va = 0x7ff9d524ffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 17 start_va = 0x7ff9d5250000 end_va = 0x7ff9d53f9fff entry_point = 0x7ff9d5250000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 18 start_va = 0x7ff9d53fa000 end_va = 0x7ffffffeffff entry_point = 0x0 region_type = private name = "private_0x00007ff9d53fa000" filename = "" Region: id = 155 start_va = 0x3c0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 156 start_va = 0x77480000 end_va = 0x77488fff entry_point = 0x77480000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 157 start_va = 0x77490000 end_va = 0x774d8fff entry_point = 0x77490000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 158 start_va = 0x774e0000 end_va = 0x77547fff entry_point = 0x774e0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 159 start_va = 0x460000 end_va = 0x55ffff entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 160 start_va = 0x74eb0000 end_va = 0x74f05fff entry_point = 0x74eb0000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 161 start_va = 0x755f0000 end_va = 0x7572ffff entry_point = 0x755f0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 162 start_va = 0x75950000 end_va = 0x75a1efff entry_point = 0x75950000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 163 start_va = 0x1c0000 end_va = 0x1cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 164 start_va = 0x3d0000 end_va = 0x44dfff entry_point = 0x3d0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 165 start_va = 0x600000 end_va = 0x60ffff entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 166 start_va = 0x74300000 end_va = 0x74398fff entry_point = 0x74300000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 167 start_va = 0x7ec40000 end_va = 0x7ed3ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ec40000" filename = "" Region: id = 168 start_va = 0x1d0000 end_va = 0x1d3fff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 169 start_va = 0x74f10000 end_va = 0x74f62fff entry_point = 0x74f10000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 170 start_va = 0x74f70000 end_va = 0x74f78fff entry_point = 0x74f70000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 171 start_va = 0x74f80000 end_va = 0x74f9cfff entry_point = 0x74f80000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 172 start_va = 0x74fb0000 end_va = 0x75027fff entry_point = 0x74fb0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 173 start_va = 0x75730000 end_va = 0x757e0fff entry_point = 0x75730000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 174 start_va = 0x75be0000 end_va = 0x75c1dfff entry_point = 0x75be0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 175 start_va = 0x773a0000 end_va = 0x7745dfff entry_point = 0x773a0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 176 start_va = 0x700000 end_va = 0x70ffff entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 177 start_va = 0x74e30000 end_va = 0x74eadfff entry_point = 0x74e30000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 178 start_va = 0x75040000 end_va = 0x7518dfff entry_point = 0x75040000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 179 start_va = 0x75190000 end_va = 0x75297fff entry_point = 0x75190000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 180 start_va = 0x75d40000 end_va = 0x75d80fff entry_point = 0x75d40000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 181 start_va = 0x75e30000 end_va = 0x75f7efff entry_point = 0x75e30000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 182 start_va = 0x710000 end_va = 0x897fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 183 start_va = 0x754c0000 end_va = 0x755b6fff entry_point = 0x754c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 184 start_va = 0x755c0000 end_va = 0x755e4fff entry_point = 0x755c0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 185 start_va = 0x1e0000 end_va = 0x1e0fff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 186 start_va = 0x370000 end_va = 0x370fff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 187 start_va = 0x8a0000 end_va = 0xa20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008a0000" filename = "" Region: id = 188 start_va = 0xa30000 end_va = 0x1e2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a30000" filename = "" Region: id = 189 start_va = 0x746b0000 end_va = 0x74786fff entry_point = 0x746b0000 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll") Region: id = 190 start_va = 0x74790000 end_va = 0x74e2afff entry_point = 0x74790000 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 191 start_va = 0x380000 end_va = 0x380fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000380000" filename = "" Region: id = 192 start_va = 0x390000 end_va = 0x39ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 193 start_va = 0x3a0000 end_va = 0x3affff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 194 start_va = 0x3b0000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 195 start_va = 0x450000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 196 start_va = 0x560000 end_va = 0x56ffff entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 197 start_va = 0x570000 end_va = 0x57ffff entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 198 start_va = 0x580000 end_va = 0x580fff entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 199 start_va = 0x590000 end_va = 0x590fff entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 200 start_va = 0x5a0000 end_va = 0x5dffff entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 201 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 202 start_va = 0x610000 end_va = 0x6affff entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 203 start_va = 0x6b0000 end_va = 0x6effff entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 204 start_va = 0x1e30000 end_va = 0x1f2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e30000" filename = "" Region: id = 205 start_va = 0x2010000 end_va = 0x201ffff entry_point = 0x0 region_type = private name = "private_0x0000000002010000" filename = "" Region: id = 206 start_va = 0x2020000 end_va = 0x401ffff entry_point = 0x0 region_type = private name = "private_0x0000000002020000" filename = "" Region: id = 207 start_va = 0x4020000 end_va = 0x411ffff entry_point = 0x0 region_type = private name = "private_0x0000000004020000" filename = "" Region: id = 208 start_va = 0x4120000 end_va = 0x43f4fff entry_point = 0x4120000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 209 start_va = 0x72e70000 end_va = 0x73f04fff entry_point = 0x72e70000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\c90ef9a73ea0044641d31b19023aad61\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\c90ef9a73ea0044641d31b19023aad61\\mscorlib.ni.dll") Region: id = 210 start_va = 0x7ed64000 end_va = 0x7ed66fff entry_point = 0x0 region_type = private name = "private_0x000000007ed64000" filename = "" Region: id = 211 start_va = 0x7ed67000 end_va = 0x7ed69fff entry_point = 0x0 region_type = private name = "private_0x000000007ed67000" filename = "" Region: id = 212 start_va = 0x757f0000 end_va = 0x758fbfff entry_point = 0x757f0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 213 start_va = 0x746a0000 end_va = 0x746a8fff entry_point = 0x746a0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 214 start_va = 0x74220000 end_va = 0x742fafff entry_point = 0x74220000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 215 start_va = 0x4400000 end_va = 0x455ffff entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 216 start_va = 0x5f0000 end_va = 0x5f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 217 start_va = 0x4400000 end_va = 0x44f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004400000" filename = "" Region: id = 218 start_va = 0x4550000 end_va = 0x455ffff entry_point = 0x0 region_type = private name = "private_0x0000000004550000" filename = "" Region: id = 219 start_va = 0x5f0000 end_va = 0x5f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 220 start_va = 0x6f0000 end_va = 0x6f3fff entry_point = 0x0 region_type = private name = "private_0x00000000006f0000" filename = "" Region: id = 221 start_va = 0x71e30000 end_va = 0x724d2fff entry_point = 0x71e30000 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\c1194e56644c7688e7eb0f68a57dcc30\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\c1194e56644c7688e7eb0f68a57dcc30\\system.core.ni.dll") Region: id = 222 start_va = 0x724e0000 end_va = 0x72e6cfff entry_point = 0x724e0000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\c24d08cc4e93fc4f6f15a637b00a2721\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\c24d08cc4e93fc4f6f15a637b00a2721\\system.ni.dll") Region: id = 223 start_va = 0x74440000 end_va = 0x744bcfff entry_point = 0x74440000 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 224 start_va = 0x744c0000 end_va = 0x74698fff entry_point = 0x744c0000 region_type = mapped_file name = "microsoft.visualbasic.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\288e4f2cf5b7a96028c8bb3fce6dc043\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\288e4f2cf5b7a96028c8bb3fce6dc043\\microsoft.visualbasic.ni.dll") Region: id = 225 start_va = 0x75c60000 end_va = 0x75ce6fff entry_point = 0x75c60000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 226 start_va = 0x1f30000 end_va = 0x1f3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f30000" filename = "" Region: id = 227 start_va = 0x1f40000 end_va = 0x1f4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f40000" filename = "" Region: id = 228 start_va = 0x711e0000 end_va = 0x71e25fff entry_point = 0x711e0000 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\635558b506364815e8348217e86fdf99\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\635558b506364815e8348217e86fdf99\\system.windows.forms.ni.dll") Region: id = 229 start_va = 0x74060000 end_va = 0x741f1fff entry_point = 0x74060000 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\ddb52221ad0200b7c2e0a308e47d5c7c\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\ddb52221ad0200b7c2e0a308e47d5c7c\\system.drawing.ni.dll") Region: id = 230 start_va = 0x1f50000 end_va = 0x1f5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 231 start_va = 0x1f70000 end_va = 0x1f7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f70000" filename = "" Region: id = 232 start_va = 0x1f80000 end_va = 0x1fbffff entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 233 start_va = 0x4560000 end_va = 0x465ffff entry_point = 0x0 region_type = private name = "private_0x0000000004560000" filename = "" Region: id = 234 start_va = 0x7ec3d000 end_va = 0x7ec3ffff entry_point = 0x0 region_type = private name = "private_0x000000007ec3d000" filename = "" Region: id = 235 start_va = 0x4660000 end_va = 0x46e2fff entry_point = 0x4660000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_7c55c866aa0c3ff0\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_7c55c866aa0c3ff0\\comctl32.dll") Region: id = 236 start_va = 0x77280000 end_va = 0x77305fff entry_point = 0x77280000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\SysWOW64\\comctl32.dll" (normalized: "c:\\windows\\syswow64\\comctl32.dll") Region: id = 237 start_va = 0x4660000 end_va = 0x473ffff entry_point = 0x0 region_type = private name = "private_0x0000000004660000" filename = "" Region: id = 238 start_va = 0x74200000 end_va = 0x74217fff entry_point = 0x74200000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 239 start_va = 0x71110000 end_va = 0x711d4fff entry_point = 0x71110000 region_type = mapped_file name = "system.runtime.remoting.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\0139b8d6c29df85226a7fe833e5cc4f1\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\0139b8d6c29df85226a7fe833e5cc4f1\\system.runtime.remoting.ni.dll") Region: id = 240 start_va = 0x7ebd0000 end_va = 0x7ebdffff entry_point = 0x0 region_type = private name = "private_0x000000007ebd0000" filename = "" Region: id = 241 start_va = 0x7ebe0000 end_va = 0x7ec2ffff entry_point = 0x0 region_type = private name = "private_0x000000007ebe0000" filename = "" Region: id = 242 start_va = 0x77130000 end_va = 0x7727cfff entry_point = 0x77130000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\SysWOW64\\GdiPlus.dll" (normalized: "c:\\windows\\syswow64\\gdiplus.dll") Region: id = 243 start_va = 0x4660000 end_va = 0x46fffff entry_point = 0x0 region_type = private name = "private_0x0000000004660000" filename = "" Region: id = 244 start_va = 0x4730000 end_va = 0x473ffff entry_point = 0x0 region_type = private name = "private_0x0000000004730000" filename = "" Region: id = 245 start_va = 0x1fc0000 end_va = 0x1ffffff entry_point = 0x0 region_type = private name = "private_0x0000000001fc0000" filename = "" Region: id = 246 start_va = 0x4740000 end_va = 0x483ffff entry_point = 0x0 region_type = private name = "private_0x0000000004740000" filename = "" Region: id = 247 start_va = 0x70f90000 end_va = 0x71101fff entry_point = 0x70f90000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\SysWOW64\\DWrite.dll" (normalized: "c:\\windows\\syswow64\\dwrite.dll") Region: id = 248 start_va = 0x7ec3a000 end_va = 0x7ec3cfff entry_point = 0x0 region_type = private name = "private_0x000000007ec3a000" filename = "" Region: id = 249 start_va = 0x4840000 end_va = 0x48e4fff entry_point = 0x4840000 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\~fontcache-system.dat") Region: id = 250 start_va = 0x1f60000 end_va = 0x1f63fff entry_point = 0x0 region_type = private name = "private_0x0000000001f60000" filename = "" Region: id = 251 start_va = 0x2000000 end_va = 0x2003fff entry_point = 0x0 region_type = private name = "private_0x0000000002000000" filename = "" Region: id = 252 start_va = 0x48f0000 end_va = 0x49effff entry_point = 0x0 region_type = private name = "private_0x00000000048f0000" filename = "" Region: id = 253 start_va = 0x49f0000 end_va = 0x4ee1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000049f0000" filename = "" Region: id = 254 start_va = 0x4ef0000 end_va = 0x5eeffff entry_point = 0x4ef0000 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\~fontcache-fontface.dat") Region: id = 255 start_va = 0x4500000 end_va = 0x4505fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004500000" filename = "" Region: id = 256 start_va = 0x4510000 end_va = 0x451ffff entry_point = 0x0 region_type = private name = "private_0x0000000004510000" filename = "" Region: id = 257 start_va = 0x75f80000 end_va = 0x7712cfff entry_point = 0x75f80000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 258 start_va = 0x743c0000 end_va = 0x74435fff entry_point = 0x743c0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 259 start_va = 0x4510000 end_va = 0x4510fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004510000" filename = "" Region: id = 260 start_va = 0x4520000 end_va = 0x452ffff entry_point = 0x0 region_type = private name = "private_0x0000000004520000" filename = "" Region: id = 261 start_va = 0x4530000 end_va = 0x453ffff entry_point = 0x0 region_type = private name = "private_0x0000000004530000" filename = "" Region: id = 262 start_va = 0x743a0000 end_va = 0x743bcfff entry_point = 0x743a0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 263 start_va = 0x74040000 end_va = 0x74057fff entry_point = 0x74040000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 264 start_va = 0x70f60000 end_va = 0x70f8efff entry_point = 0x70f60000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 265 start_va = 0x70f50000 end_va = 0x70f5dfff entry_point = 0x70f50000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 266 start_va = 0x4660000 end_va = 0x46c0fff entry_point = 0x4660000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll") Region: id = 267 start_va = 0x46f0000 end_va = 0x46fffff entry_point = 0x0 region_type = private name = "private_0x00000000046f0000" filename = "" Region: id = 268 start_va = 0x4520000 end_va = 0x4530fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004520000" filename = "" Region: id = 269 start_va = 0x4540000 end_va = 0x4541fff entry_point = 0x4540000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 270 start_va = 0x46d0000 end_va = 0x46d2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000046d0000" filename = "" Region: id = 271 start_va = 0x46e0000 end_va = 0x46e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000046e0000" filename = "" Region: id = 272 start_va = 0x4700000 end_va = 0x4707fff entry_point = 0x4700000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\System32\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tzres.dll.mui") Region: id = 273 start_va = 0x4540000 end_va = 0x4541fff entry_point = 0x4540000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 274 start_va = 0x4700000 end_va = 0x4707fff entry_point = 0x4700000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\System32\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tzres.dll.mui") Region: id = 275 start_va = 0x4540000 end_va = 0x454ffff entry_point = 0x0 region_type = private name = "private_0x0000000004540000" filename = "" Region: id = 276 start_va = 0x5ef0000 end_va = 0x5f6ffff entry_point = 0x0 region_type = private name = "private_0x0000000005ef0000" filename = "" Region: id = 277 start_va = 0x70e00000 end_va = 0x70f4cfff entry_point = 0x70e00000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll") Region: id = 278 start_va = 0x5f70000 end_va = 0x6212fff entry_point = 0x0 region_type = private name = "private_0x0000000005f70000" filename = "" Region: id = 279 start_va = 0x6220000 end_va = 0x631ffff entry_point = 0x0 region_type = private name = "private_0x0000000006220000" filename = "" Region: id = 280 start_va = 0x4700000 end_va = 0x472ffff entry_point = 0x0 region_type = private name = "private_0x0000000004700000" filename = "" Region: id = 281 start_va = 0x4700000 end_va = 0x470ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004700000" filename = "" Region: id = 282 start_va = 0x4710000 end_va = 0x471ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004710000" filename = "" Region: id = 283 start_va = 0x4720000 end_va = 0x472ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004720000" filename = "" Region: id = 284 start_va = 0x6320000 end_va = 0x63c1fff entry_point = 0x0 region_type = private name = "private_0x0000000006320000" filename = "" Region: id = 285 start_va = 0x6320000 end_va = 0x6320fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006320000" filename = "" Region: id = 286 start_va = 0x70df0000 end_va = 0x70df7fff entry_point = 0x70df0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Thread: id = 1 os_tid = 0xafc [0026.479] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0026.791] RoInitialize () returned 0x1 [0026.791] RoUninitialize () returned 0x1 [0027.648] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc17a [0027.648] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc17f [0027.683] EtwEventRegister (in: ProviderId=0x2022c9c, EnableCallback=0x1f705be, CallbackContext=0x0, RegHandle=0x2022c74 | out: RegHandle=0x2022c74) returned 0x0 [0027.702] GetCurrentProcess () returned 0xffffffff [0027.702] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x33ec58 | out: TokenHandle=0x33ec58*=0x218) returned 1 [0027.722] GetCurrentProcess () returned 0xffffffff [0027.722] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x33ecb4, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x33ecb4*=0x21c) returned 1 [0027.749] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0028.020] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x77280000 [0028.266] GetModuleHandleW (lpModuleName="user32.dll") returned 0x75e30000 [0028.267] GetProcAddress (hModule=0x75e30000, lpProcName="DefWindowProcW") returned 0x7431bdea [0028.267] GetStockObject (i=5) returned 0x1900015 [0028.277] GetModuleHandleW (lpModuleName=0x0) returned 0x140000 [0028.279] CoTaskMemAlloc (cb=0x5c) returned 0x4a3b70 [0028.279] RegisterClassW (lpWndClass=0x33eacc) returned 0xc17b [0028.279] CoTaskMemFree (pv=0x4a3b70) [0028.280] GetModuleHandleW (lpModuleName=0x0) returned 0x140000 [0028.280] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x140000, lpParam=0x0) returned 0x601ec [0028.280] SetWindowLongW (hWnd=0x601ec, nIndex=-4, dwNewLong=1949416938) returned 32966118 [0028.280] GetWindowLongW (hWnd=0x601ec, nIndex=-4) returned 1949416938 [0028.283] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x33e368 | out: phkResult=0x33e368*=0x230) returned 0x0 [0028.283] RegQueryValueExW (in: hKey=0x230, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x33e388, lpData=0x0, lpcbData=0x33e384*=0x0 | out: lpType=0x33e388*=0x0, lpData=0x0, lpcbData=0x33e384*=0x0) returned 0x2 [0028.283] RegQueryValueExW (in: hKey=0x230, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x33e388, lpData=0x0, lpcbData=0x33e384*=0x0 | out: lpType=0x33e388*=0x0, lpData=0x0, lpcbData=0x33e384*=0x0) returned 0x2 [0028.283] RegCloseKey (hKey=0x230) returned 0x0 [0028.285] SetWindowLongW (hWnd=0x601ec, nIndex=-4, dwNewLong=32966158) returned 1949416938 [0028.285] GetWindowLongW (hWnd=0x601ec, nIndex=-4) returned 32966158 [0028.285] GetWindowLongW (hWnd=0x601ec, nIndex=-16) returned 113311744 [0028.285] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc121 [0028.285] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc178 [0028.286] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x601ec, Msg=0x81, wParam=0x0, lParam=0x33e650) returned 0x1 [0028.286] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x601ec, Msg=0x83, wParam=0x0, lParam=0x33e63c) returned 0x0 [0028.373] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x601ec, Msg=0x1, wParam=0x0, lParam=0x33e650) returned 0x0 [0028.373] GetClientRect (in: hWnd=0x601ec, lpRect=0x33e39c | out: lpRect=0x33e39c) returned 1 [0028.373] GetWindowRect (in: hWnd=0x601ec, lpRect=0x33e39c | out: lpRect=0x33e39c) returned 1 [0028.374] GetParent (hWnd=0x601ec) returned 0x0 [0028.544] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0028.547] AdjustWindowRectEx (in: lpRect=0x33ebcc, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x33ebcc) returned 1 [0028.574] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0028.574] AdjustWindowRectEx (in: lpRect=0x33ebf0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x33ebf0) returned 1 [0028.577] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0028.577] AdjustWindowRectEx (in: lpRect=0x33eb78, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x33eb78) returned 1 [0028.586] GetUserObjectInformationA (in: hObj=0xa4, nIndex=1, pvInfo=0x202b5b0, nLength=0xc, lpnLengthNeeded=0x33ea54 | out: pvInfo=0x202b5b0, lpnLengthNeeded=0x33ea54) returned 1 [0028.587] SetConsoleCtrlHandler (HandlerRoutine=0x1f70636, Add=1) returned 1 [0028.588] GetModuleHandleW (lpModuleName=0x0) returned 0x140000 [0028.588] GetModuleHandleW (lpModuleName=0x0) returned 0x140000 [0028.589] GetClassInfoW (in: hInstance=0x140000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.2bf8098.0", lpWndClass=0x202b614 | out: lpWndClass=0x202b614) returned 0 [0028.590] CoTaskMemAlloc (cb=0x58) returned 0x49f918 [0028.590] RegisterClassW (lpWndClass=0x33e9a8) returned 0xc177 [0028.590] CoTaskMemFree (pv=0x49f918) [0028.590] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.2bf8098.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.2bf8098.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x140000, lpParam=0x0) returned 0x20216 [0028.592] NtdllDefWindowProc_W (hWnd=0x20216, Msg=0x83, wParam=0x0, lParam=0x33e4e4) returned 0x0 [0028.592] NtdllDefWindowProc_W (hWnd=0x20216, Msg=0x1, wParam=0x0, lParam=0x33e4f8) returned 0x0 [0028.593] NtdllDefWindowProc_W (hWnd=0x20216, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0028.593] NtdllDefWindowProc_W (hWnd=0x20216, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0028.595] GetSysColor (nIndex=10) returned 0xb4b4b4 [0028.595] GetSysColor (nIndex=2) returned 0xd1b499 [0028.595] GetSysColor (nIndex=9) returned 0x0 [0028.595] GetSysColor (nIndex=12) returned 0xababab [0028.595] GetSysColor (nIndex=15) returned 0xf0f0f0 [0028.595] GetSysColor (nIndex=20) returned 0xffffff [0028.595] GetSysColor (nIndex=16) returned 0xa0a0a0 [0028.595] GetSysColor (nIndex=15) returned 0xf0f0f0 [0028.595] GetSysColor (nIndex=16) returned 0xa0a0a0 [0028.595] GetSysColor (nIndex=21) returned 0x696969 [0028.595] GetSysColor (nIndex=22) returned 0xe3e3e3 [0028.595] GetSysColor (nIndex=20) returned 0xffffff [0028.595] GetSysColor (nIndex=18) returned 0x0 [0028.595] GetSysColor (nIndex=1) returned 0x0 [0028.595] GetSysColor (nIndex=27) returned 0xead1b9 [0028.595] GetSysColor (nIndex=28) returned 0xf2e4d7 [0028.595] GetSysColor (nIndex=17) returned 0x6d6d6d [0028.595] GetSysColor (nIndex=13) returned 0xff9933 [0028.595] GetSysColor (nIndex=14) returned 0xffffff [0028.596] GetSysColor (nIndex=26) returned 0xcc6600 [0028.596] GetSysColor (nIndex=11) returned 0xfcf7f4 [0028.596] GetSysColor (nIndex=3) returned 0xdbcdbf [0028.596] GetSysColor (nIndex=19) returned 0x0 [0028.596] GetSysColor (nIndex=24) returned 0xe1ffff [0028.596] GetSysColor (nIndex=23) returned 0x0 [0028.596] GetSysColor (nIndex=4) returned 0xf0f0f0 [0028.596] GetSysColor (nIndex=30) returned 0xf0f0f0 [0028.596] GetSysColor (nIndex=29) returned 0xff9933 [0028.596] GetSysColor (nIndex=7) returned 0x0 [0028.596] GetSysColor (nIndex=0) returned 0xc8c8c8 [0028.596] GetSysColor (nIndex=5) returned 0xffffff [0028.596] GetSysColor (nIndex=6) returned 0x646464 [0028.596] GetSysColor (nIndex=8) returned 0x0 [0028.598] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0028.598] AdjustWindowRectEx (in: lpRect=0x33ebb8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x33ebb8) returned 1 [0028.598] GetSystemMetrics (nIndex=59) returned 1456 [0028.598] GetSystemMetrics (nIndex=60) returned 916 [0028.598] GetSystemMetrics (nIndex=34) returned 140 [0028.598] GetSystemMetrics (nIndex=35) returned 39 [0028.599] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0028.599] AdjustWindowRectEx (in: lpRect=0x33eab8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x33eab8) returned 1 [0028.600] GetCurrentThreadId () returned 0xafc [0028.600] GetCurrentThreadId () returned 0xafc [0028.601] GetSystemDefaultLCID () returned 0x409 [0028.601] GetStockObject (i=17) returned 0x10a0047 [0028.602] GetObjectW (in: h=0x10a0047, c=92, pv=0x33ea2c | out: pv=0x33ea2c) returned 92 [0028.603] GetDC (hWnd=0x0) returned 0x80106d3 [0028.616] GdiplusStartup (in: token=0x4569c8, input=0x33e000, output=0x33e050 | out: token=0x4569c8, output=0x33e050) returned 0x0 [0028.621] CoTaskMemAlloc (cb=0x5c) returned 0x4a3830 [0028.622] GdipCreateFontFromLogfontW (hdc=0x80106d3, logfont=0x4a3830, font=0x33eaf0) returned 0x0 [0028.747] CoTaskMemFree (pv=0x4a3830) [0028.747] CoTaskMemAlloc (cb=0x5c) returned 0x4a3d10 [0028.747] CoTaskMemFree (pv=0x4a3d10) [0028.748] CoTaskMemAlloc (cb=0x5c) returned 0x4a3830 [0028.748] CoTaskMemFree (pv=0x4a3830) [0028.748] GdipGetFontUnit (font=0x46f1f08, unit=0x33eabc) returned 0x0 [0028.748] GdipGetFontSize (font=0x46f1f08, size=0x33eac0) returned 0x0 [0028.748] GdipGetFontStyle (font=0x46f1f08, style=0x33eab8) returned 0x0 [0028.748] GdipGetFamily (font=0x46f1f08, family=0x33eab4) returned 0x0 [0028.749] GdipGetFontSize (font=0x46f1f08, size=0x202c10c) returned 0x0 [0028.749] ReleaseDC (hWnd=0x0, hDC=0x80106d3) returned 1 [0028.749] GetDC (hWnd=0x0) returned 0x80107d6 [0028.749] GdipCreateFromHDC (hdc=0x80107d6, graphics=0x33ead4) returned 0x0 [0028.750] GdipGetDpiY (graphics=0x49086d8, dpi=0x202c214) returned 0x0 [0028.750] GdipGetFontHeight (font=0x46f1f08, graphics=0x49086d8, height=0x33eacc) returned 0x0 [0028.750] GdipGetEmHeight (family=0x48f4330, style=0, EmHeight=0x33ead4) returned 0x0 [0028.751] GdipGetLineSpacing (family=0x48f4330, style=0, LineSpacing=0x33ead4) returned 0x0 [0028.751] GdipDeleteGraphics (graphics=0x49086d8) returned 0x0 [0028.751] ReleaseDC (hWnd=0x0, hDC=0x80107d6) returned 1 [0028.752] GdipCreateFont (fontFamily=0x48f4330, emSize=0x41040000, style=0, unit=0x3, font=0x202c1d4) returned 0x0 [0028.752] GdipGetFontSize (font=0x46fef18, size=0x202c1d8) returned 0x0 [0028.752] GdipDeleteFont (font=0x46f1f08) returned 0x0 [0028.754] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0028.754] AdjustWindowRectEx (in: lpRect=0x33eaac, dwStyle=0x2830000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x33eaac) returned 1 [0028.754] AdjustWindowRectEx (in: lpRect=0x33eb84, dwStyle=0x2830000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x33eb84) returned 1 [0028.754] GetSystemMetrics (nIndex=59) returned 1456 [0028.754] GetSystemMetrics (nIndex=60) returned 916 [0028.754] GetSystemMetrics (nIndex=34) returned 140 [0028.754] GetSystemMetrics (nIndex=35) returned 39 [0028.754] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0028.754] AdjustWindowRectEx (in: lpRect=0x33e9b8, dwStyle=0x2830000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x33e9b8) returned 1 [0028.754] AdjustWindowRectEx (in: lpRect=0x33ea84, dwStyle=0x2830000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x33ea84) returned 1 [0028.756] CreateCompatibleDC (hdc=0x0) returned 0xf0107e7 [0028.756] GetDC (hWnd=0x0) returned 0x80107d6 [0028.756] GdipCreateFromHDC (hdc=0x80107d6, graphics=0x33e9e8) returned 0x0 [0028.757] CoTaskMemAlloc (cb=0x5c) returned 0x4a3830 [0028.757] GdipGetLogFontW (font=0x46fef18, graphics=0x49086d8, logfontW=0x4a3830) returned 0x0 [0028.757] CoTaskMemFree (pv=0x4a3830) [0028.757] CoTaskMemAlloc (cb=0x5c) returned 0x4a3830 [0028.757] CoTaskMemFree (pv=0x4a3830) [0028.757] CoTaskMemAlloc (cb=0x5c) returned 0x4a3d10 [0028.758] CoTaskMemFree (pv=0x4a3d10) [0028.758] GdipDeleteGraphics (graphics=0x49086d8) returned 0x0 [0028.758] ReleaseDC (hWnd=0x0, hDC=0x80107d6) returned 1 [0028.758] CoTaskMemAlloc (cb=0x5c) returned 0x4a3d10 [0028.758] CreateFontIndirectW (lplf=0x4a3d10) returned 0x190a0575 [0028.758] CoTaskMemFree (pv=0x4a3d10) [0028.758] SelectObject (hdc=0xf0107e7, h=0x190a0575) returned 0x18a0048 [0028.758] GetTextMetricsW (in: hdc=0xf0107e7, lptm=0x33eaf8 | out: lptm=0x33eaf8) returned 1 [0028.758] GetTextExtentPoint32W (in: hdc=0xf0107e7, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x202c74c | out: psizl=0x202c74c) returned 1 [0028.759] SelectObject (hdc=0xf0107e7, h=0x18a0048) returned 0x190a0575 [0028.759] DeleteDC (hdc=0xf0107e7) returned 1 [0028.760] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0028.760] AdjustWindowRectEx (in: lpRect=0x33e848, dwStyle=0x2800000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x33e848) returned 1 [0028.760] AdjustWindowRectEx (in: lpRect=0x33ea84, dwStyle=0x2800000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x33ea84) returned 1 [0028.760] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0028.760] AdjustWindowRectEx (in: lpRect=0x33e7b8, dwStyle=0x2800000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x33e7b8) returned 1 [0028.760] AdjustWindowRectEx (in: lpRect=0x33e8a8, dwStyle=0x2800000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x33e8a8) returned 1 [0028.760] GetSystemMetrics (nIndex=34) returned 140 [0028.760] GetSystemMetrics (nIndex=35) returned 39 [0028.760] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0028.760] AdjustWindowRectEx (in: lpRect=0x33ea7c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x33ea7c) returned 1 [0028.760] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0028.760] AdjustWindowRectEx (in: lpRect=0x33e8cc, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x33e8cc) returned 1 [0028.762] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0028.762] AdjustWindowRectEx (in: lpRect=0x33ed68, dwStyle=0x2800000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x33ed68) returned 1 [0028.762] GetModuleHandleW (lpModuleName=0x0) returned 0x140000 [0028.762] CreateWindowExW (dwExStyle=0x90001, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName=0x0, dwStyle=0x2800000, X=-2147483648, Y=-2147483648, nWidth=10, nHeight=10, hWndParent=0x0, hMenu=0x0, hInstance=0x140000, lpParam=0x0) returned 0x8002c [0028.762] SetWindowLongW (hWnd=0x8002c, nIndex=-4, dwNewLong=1949416938) returned 32966118 [0028.762] GetWindowLongW (hWnd=0x8002c, nIndex=-4) returned 1949416938 [0028.763] SetWindowLongW (hWnd=0x8002c, nIndex=-4, dwNewLong=32966278) returned 1949416938 [0028.763] GetWindowLongW (hWnd=0x8002c, nIndex=-4) returned 32966278 [0028.763] GetWindowLongW (hWnd=0x8002c, nIndex=-16) returned 113246208 [0028.763] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x81, wParam=0x0, lParam=0x33e848) returned 0x1 [0028.763] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x83, wParam=0x0, lParam=0x33e834) returned 0x0 [0028.764] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x1, wParam=0x0, lParam=0x33e848) returned 0x0 [0028.764] GetClientRect (in: hWnd=0x8002c, lpRect=0x33e55c | out: lpRect=0x33e55c) returned 1 [0028.764] GetWindowRect (in: hWnd=0x8002c, lpRect=0x33e55c | out: lpRect=0x33e55c) returned 1 [0028.764] GetWindowTextLengthW (hWnd=0x8002c) returned 0 [0028.764] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0028.764] GetSystemMetrics (nIndex=42) returned 0 [0028.764] GetWindowTextW (in: hWnd=0x8002c, lpString=0x33e3d4, nMaxCount=1 | out: lpString="") returned 0 [0028.764] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xd, wParam=0x1, lParam=0x33e3d4) returned 0x0 [0028.767] SetLayeredWindowAttributes (hwnd=0x8002c, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0028.768] GetStartupInfoW (in: lpStartupInfo=0x202caf4 | out: lpStartupInfo=0x202caf4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0028.769] GetParent (hWnd=0x8002c) returned 0x0 [0028.769] GetStockObject (i=5) returned 0x1900015 [0028.769] GetModuleHandleW (lpModuleName=0x0) returned 0x140000 [0028.770] CoTaskMemAlloc (cb=0x5c) returned 0x4a3830 [0028.770] RegisterClassW (lpWndClass=0x33ecec) returned 0xc174 [0028.770] CoTaskMemFree (pv=0x4a3830) [0028.770] GetModuleHandleW (lpModuleName=0x0) returned 0x140000 [0028.770] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.2bf8098_r11_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x140000, lpParam=0x0) returned 0x6001a [0028.770] SetWindowLongW (hWnd=0x6001a, nIndex=-4, dwNewLong=1949416938) returned 32966318 [0028.770] GetWindowLongW (hWnd=0x6001a, nIndex=-4) returned 1949416938 [0028.770] SetWindowLongW (hWnd=0x6001a, nIndex=-4, dwNewLong=32966358) returned 1949416938 [0028.770] GetWindowLongW (hWnd=0x6001a, nIndex=-4) returned 32966358 [0028.770] GetWindowLongW (hWnd=0x6001a, nIndex=-16) returned 79691776 [0028.770] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x6001a, Msg=0x24, wParam=0x0, lParam=0x33e87c) returned 0x0 [0028.770] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x6001a, Msg=0x81, wParam=0x0, lParam=0x33e870) returned 0x1 [0028.771] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x6001a, Msg=0x83, wParam=0x0, lParam=0x33e85c) returned 0x0 [0028.771] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x6001a, Msg=0x1, wParam=0x0, lParam=0x33e870) returned 0x0 [0028.771] SetWindowLongW (hWnd=0x8002c, nIndex=-8, dwNewLong=393242) returned 0 [0028.772] SendMessageW (hWnd=0x8002c, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0028.772] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0028.772] SendMessageW (hWnd=0x8002c, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0028.772] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0028.773] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xd, wParam=0x104, lParam=0x4556620) returned 0x0 [0028.774] GetSystemMenu (hWnd=0x8002c, bRevert=0) returned 0x0 [0028.774] GetWindowPlacement (in: hWnd=0x8002c, lpwndpl=0x33ee1c | out: lpwndpl=0x33ee1c) returned 1 [0028.774] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0028.774] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0028.774] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x1) returned 1 [0028.774] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0028.774] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0028.774] GetClientRect (in: hWnd=0x8002c, lpRect=0x33ee60 | out: lpRect=0x33ee60) returned 1 [0028.774] GetClientRect (in: hWnd=0x8002c, lpRect=0x33edc0 | out: lpRect=0x33edc0) returned 1 [0028.774] GetWindowRect (in: hWnd=0x8002c, lpRect=0x33edc0 | out: lpRect=0x33edc0) returned 1 [0028.774] SetWindowLongW (hWnd=0x8002c, nIndex=-8, dwNewLong=393242) returned 393242 [0028.777] GetSystemMetrics (nIndex=11) returned 32 [0028.777] GetSystemMetrics (nIndex=12) returned 32 [0028.777] GetDC (hWnd=0x0) returned 0xc0101bb [0028.777] GetDeviceCaps (hdc=0xc0101bb, index=12) returned 32 [0028.777] GetDeviceCaps (hdc=0xc0101bb, index=14) returned 1 [0028.777] ReleaseDC (hWnd=0x0, hDC=0xc0101bb) returned 1 [0028.777] CreateIconFromResourceEx (presbits=0x202f914, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xa01af [0028.778] SendMessageW (hWnd=0x6001a, Msg=0x80, wParam=0x1, lParam=0xa01af) returned 0x0 [0028.778] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x6001a, Msg=0x80, wParam=0x1, lParam=0xa01af) returned 0x0 [0028.778] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0028.778] GetWindowLongW (hWnd=0x8002c, nIndex=-16) returned 113246208 [0028.778] GetWindowTextLengthW (hWnd=0x8002c) returned 0 [0028.778] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0028.778] GetSystemMetrics (nIndex=42) returned 0 [0028.778] GetWindowTextW (in: hWnd=0x8002c, lpString=0x33ed6c, nMaxCount=1 | out: lpString="") returned 0 [0028.778] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xd, wParam=0x1, lParam=0x33ed6c) returned 0x0 [0028.778] GetWindowTextLengthW (hWnd=0x8002c) returned 0 [0028.778] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0028.778] GetSystemMetrics (nIndex=42) returned 0 [0028.778] GetWindowTextW (in: hWnd=0x8002c, lpString=0x33ed6c, nMaxCount=1 | out: lpString="") returned 0 [0028.778] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xd, wParam=0x1, lParam=0x33ed6c) returned 0x0 [0028.778] GetWindowLongW (hWnd=0x8002c, nIndex=-16) returned 113246208 [0028.778] GetWindowLongW (hWnd=0x8002c, nIndex=-20) returned 590081 [0028.778] SetWindowLongW (hWnd=0x8002c, nIndex=-16, dwNewLong=41943040) returned 113246208 [0028.778] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x7c, wParam=0xfffffff0, lParam=0x33edc4) returned 0x0 [0028.779] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x7d, wParam=0xfffffff0, lParam=0x33edc4) returned 0x0 [0028.780] SetWindowLongW (hWnd=0x8002c, nIndex=-20, dwNewLong=589825) returned 590081 [0028.780] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x7c, wParam=0xffffffec, lParam=0x33edc4) returned 0x0 [0028.780] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x7d, wParam=0xffffffec, lParam=0x33edc4) returned 0x0 [0028.781] SetWindowPos (hWnd=0x8002c, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0028.781] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x46, wParam=0x0, lParam=0x33edd8) returned 0x0 [0028.781] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x83, wParam=0x1, lParam=0x33edb0) returned 0x0 [0028.781] GetWindowPlacement (in: hWnd=0x8002c, lpwndpl=0x33eb6c | out: lpwndpl=0x33eb6c) returned 1 [0028.781] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x47, wParam=0x0, lParam=0x33edd8) returned 0x0 [0028.781] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x3, wParam=0x0, lParam=0x1d001d) returned 0x0 [0028.781] GetClientRect (in: hWnd=0x8002c, lpRect=0x33e558 | out: lpRect=0x33e558) returned 1 [0028.781] GetWindowRect (in: hWnd=0x8002c, lpRect=0x33e558 | out: lpRect=0x33e558) returned 1 [0028.781] GetWindowTextLengthW (hWnd=0x8002c) returned 0 [0028.781] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0028.781] GetSystemMetrics (nIndex=42) returned 0 [0028.781] GetWindowTextW (in: hWnd=0x8002c, lpString=0x33e3d0, nMaxCount=1 | out: lpString="") returned 0 [0028.781] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xd, wParam=0x1, lParam=0x33e3d0) returned 0x0 [0028.781] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x5, wParam=0x0, lParam=0x210086) returned 0x0 [0028.781] GetClientRect (in: hWnd=0x8002c, lpRect=0x33eb1c | out: lpRect=0x33eb1c) returned 1 [0028.781] GetWindowRect (in: hWnd=0x8002c, lpRect=0x33eb1c | out: lpRect=0x33eb1c) returned 1 [0028.781] RedrawWindow (hWnd=0x8002c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0028.781] GetSystemMenu (hWnd=0x8002c, bRevert=0) returned 0x0 [0028.781] GetWindowPlacement (in: hWnd=0x8002c, lpwndpl=0x33ee0c | out: lpwndpl=0x33ee0c) returned 1 [0028.781] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0028.782] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0028.782] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x1) returned 1 [0028.782] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0028.782] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0028.782] ShowWindow (hWnd=0x8002c, nCmdShow=5) returned 0 [0028.782] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.782] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0028.782] GetModuleHandleW (lpModuleName=0x0) returned 0x140000 [0028.782] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=165, Y=111, nWidth=100, nHeight=50, hWndParent=0x8002c, hMenu=0x0, hInstance=0x140000, lpParam=0x0) returned 0x50180 [0028.782] SetWindowLongW (hWnd=0x50180, nIndex=-4, dwNewLong=1949416938) returned 32966118 [0028.782] GetWindowLongW (hWnd=0x50180, nIndex=-4) returned 1949416938 [0028.782] SetWindowLongW (hWnd=0x50180, nIndex=-4, dwNewLong=32966398) returned 1949416938 [0028.782] GetWindowLongW (hWnd=0x50180, nIndex=-4) returned 32966398 [0028.782] GetWindowLongW (hWnd=0x50180, nIndex=-16) returned 1174405120 [0028.782] GetWindowLongW (hWnd=0x50180, nIndex=-12) returned 0 [0028.782] SetWindowLongW (hWnd=0x50180, nIndex=-12, dwNewLong=328064) returned 0 [0028.783] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x50180, Msg=0x81, wParam=0x0, lParam=0x33e4f0) returned 0x1 [0028.783] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x50180, Msg=0x83, wParam=0x0, lParam=0x33e4dc) returned 0x0 [0028.783] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x50180, Msg=0x1, wParam=0x0, lParam=0x33e4f0) returned 0x0 [0028.783] GetWindow (hWnd=0x50180, uCmd=0x3) returned 0x0 [0028.783] GetClientRect (in: hWnd=0x50180, lpRect=0x33e23c | out: lpRect=0x33e23c) returned 1 [0028.783] GetWindowRect (in: hWnd=0x50180, lpRect=0x33e23c | out: lpRect=0x33e23c) returned 1 [0028.783] GetParent (hWnd=0x50180) returned 0x8002c [0028.783] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8002c, lpPoints=0x33e23c, cPoints=0x2 | out: lpPoints=0x33e23c) returned -1835037 [0028.784] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x50180, Msg=0x5, wParam=0x0, lParam=0x320064) returned 0x0 [0028.784] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x50180, Msg=0x3, wParam=0x0, lParam=0x6f00a5) returned 0x0 [0028.784] GetClientRect (in: hWnd=0x50180, lpRect=0x33e298 | out: lpRect=0x33e298) returned 1 [0028.784] GetWindowRect (in: hWnd=0x50180, lpRect=0x33e298 | out: lpRect=0x33e298) returned 1 [0028.784] GetParent (hWnd=0x50180) returned 0x8002c [0028.784] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8002c, lpPoints=0x33e298, cPoints=0x2 | out: lpPoints=0x33e298) returned -1835037 [0028.784] SendMessageW (hWnd=0x50180, Msg=0x2210, wParam=0x1800001, lParam=0x50180) returned 0x0 [0028.784] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x50180, Msg=0x2210, wParam=0x1800001, lParam=0x50180) returned 0x0 [0028.784] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x50180, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.784] GetParent (hWnd=0x50180) returned 0x8002c [0028.785] GetWindowTextLengthW (hWnd=0x8002c) returned 0 [0028.785] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0028.785] GetSystemMetrics (nIndex=42) returned 0 [0028.785] GetWindowTextW (in: hWnd=0x8002c, lpString=0x33ea6c, nMaxCount=1 | out: lpString="") returned 0 [0028.785] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xd, wParam=0x1, lParam=0x33ea6c) returned 0x0 [0028.794] GetFullPathNameW (in: lpFileName="C:\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x33e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Microsoft\\", lpFilePart=0x0) returned 0xd [0028.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33ea14) returned 1 [0028.795] GetFileAttributesExW (in: lpFileName="C:\\Microsoft\\" (normalized: "c:\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x33ea90 | out: lpFileInformation=0x33ea90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0028.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33ea10) returned 1 [0028.796] GetFullPathNameW (in: lpFileName="C:\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x33e59c, lpFilePart=0x0 | out: lpBuffer="C:\\Microsoft\\", lpFilePart=0x0) returned 0xd [0028.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e9a4) returned 1 [0028.797] GetFileAttributesExW (in: lpFileName="C:\\Microsoft\\" (normalized: "c:\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x33ea20 | out: lpFileInformation=0x33ea20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0028.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e9a0) returned 1 [0028.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e9a4) returned 1 [0028.797] GetFileAttributesExW (in: lpFileName="C:\\Microsoft" (normalized: "c:\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x33ea20 | out: lpFileInformation=0x33ea20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0028.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e9a0) returned 1 [0028.798] CreateDirectoryW (lpPathName="C:\\Microsoft" (normalized: "c:\\microsoft"), lpSecurityAttributes=0x0) returned 1 [0028.803] GetFullPathNameW (in: lpFileName="C:\\Microsoft\\hash", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Microsoft\\hash", lpFilePart=0x0) returned 0x11 [0028.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e960) returned 1 [0028.804] CreateFileW (lpFileName="C:\\Microsoft\\hash" (normalized: "c:\\microsoft\\hash"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x250 [0028.804] GetFileType (hFile=0x250) returned 0x1 [0028.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e95c) returned 1 [0028.804] GetFileType (hFile=0x250) returned 0x1 [0028.806] WriteFile (in: hFile=0x250, lpBuffer=0x2032e04*, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0x33e9fc, lpOverlapped=0x0 | out: lpBuffer=0x2032e04*, lpNumberOfBytesWritten=0x33e9fc*=0x32, lpOverlapped=0x0) returned 1 [0028.806] CloseHandle (hObject=0x250) returned 1 [0028.807] GetFullPathNameW (in: lpFileName="C:\\Microsoft", nBufferLength=0x105, lpBuffer=0x33e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Microsoft", lpFilePart=0x0) returned 0xc [0028.809] SetFileAttributesW (lpFileName="C:\\Microsoft", dwFileAttributes=0x2) returned 1 [0030.870] CoTaskMemAlloc (cb=0x20c) returned 0x4dd130 [0030.871] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x4dd130 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Documents") returned 0x0 [0030.998] CoTaskMemFree (pv=0x4dd130) [0030.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e498, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f690720, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f690720, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f690720, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f690720, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.045] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.045] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc658 [0031.046] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.047] FindClose (in: hFindFile=0x4dc658 | out: hFindFile=0x4dc658) returned 1 [0031.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.048] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc658 [0031.048] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.048] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.048] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.049] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.049] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.049] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.049] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.049] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.049] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.049] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.049] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.049] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.049] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.049] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.049] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.049] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.050] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.050] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.050] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.050] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.050] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.050] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.050] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.050] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.050] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.050] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.050] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.050] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.051] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.051] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.051] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.051] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.051] FindClose (in: hFindFile=0x4dc658 | out: hFindFile=0x4dc658) returned 1 [0031.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f690720, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f690720, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f690720, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f690720, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.053] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.053] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc918 [0031.053] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.053] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0031.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.053] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc318 [0031.053] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.053] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.053] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.053] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.054] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.054] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.054] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.054] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.054] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.054] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.054] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.054] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.054] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.054] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.054] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.054] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.055] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.055] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.055] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.055] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.055] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.055] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.055] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.055] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.055] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.055] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.056] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.056] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.056] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.056] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.056] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.056] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.056] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0031.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f690720, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f690720, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f690720, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f690720, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.069] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.069] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc918 [0031.069] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.069] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0031.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.070] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc418 [0031.070] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.070] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.070] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.070] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.070] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.070] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.070] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.071] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.071] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.071] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.071] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.071] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.071] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.071] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.071] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.071] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.071] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.071] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.072] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.072] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.072] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.072] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.072] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.072] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.072] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.072] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.072] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.072] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.072] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.072] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.073] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.073] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.073] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0031.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", lpFilePart=0x0) returned 0x2b [0031.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.076] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\-spm6vjb.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x294 [0031.076] GetFileType (hFile=0x294) returned 0x1 [0031.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.076] GetFileType (hFile=0x294) returned 0x1 [0031.076] GetFileSize (in: hFile=0x294, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0xf9c2 [0031.077] ReadFile (in: hFile=0x294, lpBuffer=0x2046904, nNumberOfBytesToRead=0xf9c2, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x2046904*, lpNumberOfBytesRead=0x33e984*=0xf9c2, lpOverlapped=0x0) returned 1 [0031.077] CloseHandle (hObject=0x294) returned 1 [0031.134] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x33e9b8 | out: pfEnabled=0x33e9b8) returned 0x0 [0031.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", lpFilePart=0x0) returned 0x30 [0031.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.264] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\-spm6vjb.odt.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.265] GetFileType (hFile=0x2a4) returned 0x1 [0031.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.265] GetFileType (hFile=0x2a4) returned 0x1 [0031.265] WriteFile (in: hFile=0x2a4, lpBuffer=0x205ac54*, nNumberOfBytesToWrite=0xf9d0, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x205ac54*, lpNumberOfBytesWritten=0x33e974*=0xf9d0, lpOverlapped=0x0) returned 1 [0031.266] CloseHandle (hObject=0x2a4) returned 1 [0031.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ff75fb8, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ff75fb8, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ff75fb8, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ff75fb8, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.268] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.268] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc418 [0031.269] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.269] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0031.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.269] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc8d8 [0031.269] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.269] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.269] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.269] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.269] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.269] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.270] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.270] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.270] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.270] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.270] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.270] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.270] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.270] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.270] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.270] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.270] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.271] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.271] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.271] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.271] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.271] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.271] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.271] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.271] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.271] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.272] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.272] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.272] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.272] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.272] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.272] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.273] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.273] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0031.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", lpFilePart=0x0) returned 0x2b [0031.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", lpFilePart=0x0) returned 0x2b [0031.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", lpFilePart=0x0) returned 0x2b [0031.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", lpFilePart=0x0) returned 0x2b [0031.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\-spm6vjb.odt"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eb6b00, ftCreationTime.dwHighDateTime=0x1d353ad, ftLastAccessTime.dwLowDateTime=0xeb793ff0, ftLastAccessTime.dwHighDateTime=0x1d34fa0, ftLastWriteTime.dwLowDateTime=0xeb793ff0, ftLastWriteTime.dwHighDateTime=0x1d34fa0, nFileSizeHigh=0x0, nFileSizeLow=0xf9c2)) returned 1 [0031.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", lpFilePart=0x0) returned 0x2b [0031.274] GetFullPathNameW (in: lpFileName="-sPM6vJb.odt", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\-sPM6vJb.odt", lpFilePart=0x0) returned 0x29 [0031.274] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc458 [0031.274] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.275] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0031.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", lpFilePart=0x0) returned 0x2b [0031.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", lpFilePart=0x0) returned 0x2b [0031.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", lpFilePart=0x0) returned 0x2b [0031.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\-spm6vjb.odt"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eb6b00, ftCreationTime.dwHighDateTime=0x1d353ad, ftLastAccessTime.dwLowDateTime=0xeb793ff0, ftLastAccessTime.dwHighDateTime=0x1d34fa0, ftLastWriteTime.dwLowDateTime=0xeb793ff0, ftLastWriteTime.dwHighDateTime=0x1d34fa0, nFileSizeHigh=0x0, nFileSizeLow=0xf9c2)) returned 1 [0031.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", lpFilePart=0x0) returned 0x2b [0031.275] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\-spm6vjb.odt")) returned 1 [0031.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ff8abd0, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ff8abd0, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ff8abd0, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ff8abd0, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.277] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.277] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc3d8 [0031.278] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.278] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.278] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc798 [0031.278] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.278] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.278] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.278] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.279] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.279] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.279] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.279] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.279] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.279] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.279] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.279] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.279] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.279] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.279] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.280] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.280] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.280] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.280] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.280] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.280] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.280] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.280] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.280] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.280] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.281] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.281] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.281] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.281] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.281] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.281] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.281] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.281] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ff8abd0, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ff8abd0, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ff8abd0, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ff8abd0, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.282] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.282] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc3d8 [0031.282] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.282] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.282] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc1d8 [0031.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.284] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.284] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.284] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.284] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.284] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.284] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.284] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.284] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.284] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.284] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.284] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.285] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.285] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.285] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.285] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.285] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.285] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.285] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.285] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.285] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.285] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.285] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", lpFilePart=0x0) returned 0x29 [0031.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.286] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\0u2ya.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.286] GetFileType (hFile=0x2a4) returned 0x1 [0031.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.286] GetFileType (hFile=0x2a4) returned 0x1 [0031.286] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x2eb6 [0031.286] ReadFile (in: hFile=0x2a4, lpBuffer=0x207cf10, nNumberOfBytesToRead=0x2eb6, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x207cf10*, lpNumberOfBytesRead=0x33e984*=0x2eb6, lpOverlapped=0x0) returned 1 [0031.286] CloseHandle (hObject=0x2a4) returned 1 [0031.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", lpFilePart=0x0) returned 0x2e [0031.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.287] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\0u2ya.docx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.287] GetFileType (hFile=0x2a4) returned 0x1 [0031.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.287] GetFileType (hFile=0x2a4) returned 0x1 [0031.287] WriteFile (in: hFile=0x2a4, lpBuffer=0x2080378*, nNumberOfBytesToWrite=0x2ec0, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x2080378*, lpNumberOfBytesWritten=0x33e974*=0x2ec0, lpOverlapped=0x0) returned 1 [0031.288] CloseHandle (hObject=0x2a4) returned 1 [0031.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ff8abd0, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ff8abd0, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ff8abd0, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ff8abd0, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.290] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.290] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc658 [0031.290] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.290] FindClose (in: hFindFile=0x4dc658 | out: hFindFile=0x4dc658) returned 1 [0031.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.290] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc658 [0031.290] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.290] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.290] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.291] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.291] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.291] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.291] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.291] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.291] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.291] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.291] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.291] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.291] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.291] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.291] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.292] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.292] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.292] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.292] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.292] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.292] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.292] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.292] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.292] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.292] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.293] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.293] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.293] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.293] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.293] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.293] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.293] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.293] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.293] FindClose (in: hFindFile=0x4dc658 | out: hFindFile=0x4dc658) returned 1 [0031.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", lpFilePart=0x0) returned 0x29 [0031.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", lpFilePart=0x0) returned 0x29 [0031.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", lpFilePart=0x0) returned 0x29 [0031.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", lpFilePart=0x0) returned 0x29 [0031.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\0u2ya.docx"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae0f890, ftCreationTime.dwHighDateTime=0x1d38795, ftLastAccessTime.dwLowDateTime=0xf14c2860, ftLastAccessTime.dwHighDateTime=0x1d38160, ftLastWriteTime.dwLowDateTime=0xf14c2860, ftLastWriteTime.dwHighDateTime=0x1d38160, nFileSizeHigh=0x0, nFileSizeLow=0x2eb6)) returned 1 [0031.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", lpFilePart=0x0) returned 0x29 [0031.294] GetFullPathNameW (in: lpFileName="0u2YA.docx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\0u2YA.docx", lpFilePart=0x0) returned 0x27 [0031.294] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc358 [0031.294] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.294] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", lpFilePart=0x0) returned 0x29 [0031.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", lpFilePart=0x0) returned 0x29 [0031.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", lpFilePart=0x0) returned 0x29 [0031.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\0u2ya.docx"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae0f890, ftCreationTime.dwHighDateTime=0x1d38795, ftLastAccessTime.dwLowDateTime=0xf14c2860, ftLastAccessTime.dwHighDateTime=0x1d38160, ftLastWriteTime.dwLowDateTime=0xf14c2860, ftLastWriteTime.dwHighDateTime=0x1d38160, nFileSizeHigh=0x0, nFileSizeLow=0x2eb6)) returned 1 [0031.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", lpFilePart=0x0) returned 0x29 [0031.294] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\0u2ya.docx")) returned 1 [0031.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ffb0f92, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ffb0f92, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ffb0f92, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ffb0f92, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.296] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.296] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc1d8 [0031.296] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.296] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.296] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc798 [0031.297] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.297] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.297] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.297] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.297] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.297] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.297] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.297] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.297] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.297] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.297] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.297] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.297] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.298] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.298] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.298] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.298] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.298] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.298] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.298] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.298] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.298] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.298] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.298] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.299] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.299] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.299] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.299] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.299] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.299] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.299] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.299] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.299] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ffb0f92, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ffb0f92, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ffb0f92, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ffb0f92, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.300] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.300] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc358 [0031.300] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.300] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.301] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc298 [0031.301] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.301] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.301] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.301] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.301] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.301] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.301] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.301] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.301] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.301] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.302] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.302] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.302] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.302] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.302] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.302] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.302] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.302] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.302] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.302] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.303] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.303] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.303] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.303] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.303] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.303] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.303] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.303] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.303] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.303] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.303] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.304] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.304] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0031.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", lpFilePart=0x0) returned 0x32 [0031.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.304] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf" (normalized: "c:\\users\\5jghkoaofdp\\documents\\7wwg1y1tq2o4xif.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.304] GetFileType (hFile=0x2a4) returned 0x1 [0031.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.304] GetFileType (hFile=0x2a4) returned 0x1 [0031.304] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x54f [0031.304] ReadFile (in: hFile=0x2a4, lpBuffer=0x2096060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x2096060*, lpNumberOfBytesRead=0x33e984*=0x54f, lpOverlapped=0x0) returned 1 [0031.305] CloseHandle (hObject=0x2a4) returned 1 [0031.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", lpFilePart=0x0) returned 0x37 [0031.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.305] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\7wwg1y1tq2o4xif.pdf.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.308] GetFileType (hFile=0x2a4) returned 0x1 [0031.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.308] GetFileType (hFile=0x2a4) returned 0x1 [0031.308] WriteFile (in: hFile=0x2a4, lpBuffer=0x2097cac*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x2097cac*, lpNumberOfBytesWritten=0x33e948*=0x550, lpOverlapped=0x0) returned 1 [0031.309] CloseHandle (hObject=0x2a4) returned 1 [0031.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ffd721e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ffd721e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ffd721e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ffd721e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.310] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.310] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc1d8 [0031.310] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.310] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.310] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc918 [0031.311] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.311] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.311] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.311] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.311] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.311] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.311] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.311] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.311] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.311] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.311] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.312] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.312] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.312] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.312] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.312] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.312] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.312] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.312] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.312] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.312] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.312] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.312] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.313] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.313] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.313] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.313] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.313] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.313] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.313] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.313] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.313] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.313] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.313] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0031.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", lpFilePart=0x0) returned 0x32 [0031.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", lpFilePart=0x0) returned 0x32 [0031.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", lpFilePart=0x0) returned 0x32 [0031.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", lpFilePart=0x0) returned 0x32 [0031.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf" (normalized: "c:\\users\\5jghkoaofdp\\documents\\7wwg1y1tq2o4xif.pdf"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dc3db20, ftCreationTime.dwHighDateTime=0x1d357d6, ftLastAccessTime.dwLowDateTime=0x6a3410d0, ftLastAccessTime.dwHighDateTime=0x1d352bd, ftLastWriteTime.dwLowDateTime=0x6a3410d0, ftLastWriteTime.dwHighDateTime=0x1d352bd, nFileSizeHigh=0x0, nFileSizeLow=0x54f)) returned 1 [0031.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", lpFilePart=0x0) returned 0x32 [0031.314] GetFullPathNameW (in: lpFileName="7wwG1Y1tq2o4XiF.pdf", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\7wwG1Y1tq2o4XiF.pdf", lpFilePart=0x0) returned 0x30 [0031.314] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc658 [0031.314] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.314] FindClose (in: hFindFile=0x4dc658 | out: hFindFile=0x4dc658) returned 1 [0031.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", lpFilePart=0x0) returned 0x32 [0031.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", lpFilePart=0x0) returned 0x32 [0031.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", lpFilePart=0x0) returned 0x32 [0031.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf" (normalized: "c:\\users\\5jghkoaofdp\\documents\\7wwg1y1tq2o4xif.pdf"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dc3db20, ftCreationTime.dwHighDateTime=0x1d357d6, ftLastAccessTime.dwLowDateTime=0x6a3410d0, ftLastAccessTime.dwHighDateTime=0x1d352bd, ftLastWriteTime.dwLowDateTime=0x6a3410d0, ftLastWriteTime.dwHighDateTime=0x1d352bd, nFileSizeHigh=0x0, nFileSizeLow=0x54f)) returned 1 [0031.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", lpFilePart=0x0) returned 0x32 [0031.315] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf" (normalized: "c:\\users\\5jghkoaofdp\\documents\\7wwg1y1tq2o4xif.pdf")) returned 1 [0031.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ffd721e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ffd721e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ffd721e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ffd721e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.316] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.316] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc7d8 [0031.316] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.316] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.317] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc658 [0031.317] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.317] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.317] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.317] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.319] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.319] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.319] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.319] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.319] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.319] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.320] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.320] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.320] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.320] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.320] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.320] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.320] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.321] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.321] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.321] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.321] FindClose (in: hFindFile=0x4dc658 | out: hFindFile=0x4dc658) returned 1 [0031.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ffd721e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ffd721e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6ffd721e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ffd721e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.322] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.322] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc4d8 [0031.322] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.322] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0031.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.322] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc898 [0031.322] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.322] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.322] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.325] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.325] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.325] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.325] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.325] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.325] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.325] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0031.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", lpFilePart=0x0) returned 0x30 [0031.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.325] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\9tmo3uu8-scl.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.325] GetFileType (hFile=0x2a4) returned 0x1 [0031.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.325] GetFileType (hFile=0x2a4) returned 0x1 [0031.325] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x170ce [0031.326] ReadFile (in: hFile=0x2a4, lpBuffer=0x3029390, nNumberOfBytesToRead=0x170ce, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x3029390*, lpNumberOfBytesRead=0x33e984*=0x170ce, lpOverlapped=0x0) returned 1 [0031.326] CloseHandle (hObject=0x2a4) returned 1 [0031.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", lpFilePart=0x0) returned 0x35 [0031.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.329] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\9tmo3uu8-scl.xlsx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.330] GetFileType (hFile=0x2a4) returned 0x1 [0031.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.330] GetFileType (hFile=0x2a4) returned 0x1 [0031.330] WriteFile (in: hFile=0x2a4, lpBuffer=0x3040480*, nNumberOfBytesToWrite=0x170d0, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x3040480*, lpNumberOfBytesWritten=0x33e974*=0x170d0, lpOverlapped=0x0) returned 1 [0031.331] CloseHandle (hObject=0x2a4) returned 1 [0031.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6fffd44c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6fffd44c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x6fffd44c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6fffd44c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.333] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.333] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc418 [0031.333] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.333] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0031.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.334] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc298 [0031.334] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.334] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.334] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.334] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.334] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.334] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.334] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.334] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.335] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.335] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.335] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.335] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.335] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.335] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.335] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.335] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.335] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.335] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.336] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.336] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.336] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.336] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.336] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.336] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.336] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.336] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.336] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.336] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.336] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.337] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.337] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.337] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.337] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.337] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0031.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", lpFilePart=0x0) returned 0x30 [0031.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", lpFilePart=0x0) returned 0x30 [0031.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", lpFilePart=0x0) returned 0x30 [0031.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", lpFilePart=0x0) returned 0x30 [0031.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\9tmo3uu8-scl.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc5da80, ftCreationTime.dwHighDateTime=0x1d34e39, ftLastAccessTime.dwLowDateTime=0x96fa9ed0, ftLastAccessTime.dwHighDateTime=0x1d34e9f, ftLastWriteTime.dwLowDateTime=0x96fa9ed0, ftLastWriteTime.dwHighDateTime=0x1d34e9f, nFileSizeHigh=0x0, nFileSizeLow=0x170ce)) returned 1 [0031.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", lpFilePart=0x0) returned 0x30 [0031.338] GetFullPathNameW (in: lpFileName="9TMo3uu8-Scl.xlsx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\9TMo3uu8-Scl.xlsx", lpFilePart=0x0) returned 0x2e [0031.338] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc358 [0031.338] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.338] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", lpFilePart=0x0) returned 0x30 [0031.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", lpFilePart=0x0) returned 0x30 [0031.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", lpFilePart=0x0) returned 0x30 [0031.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\9tmo3uu8-scl.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc5da80, ftCreationTime.dwHighDateTime=0x1d34e39, ftLastAccessTime.dwLowDateTime=0x96fa9ed0, ftLastAccessTime.dwHighDateTime=0x1d34e9f, ftLastWriteTime.dwLowDateTime=0x96fa9ed0, ftLastWriteTime.dwHighDateTime=0x1d34e9f, nFileSizeHigh=0x0, nFileSizeLow=0x170ce)) returned 1 [0031.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", lpFilePart=0x0) returned 0x30 [0031.338] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\9tmo3uu8-scl.xlsx")) returned 1 [0031.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x700236fe, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700236fe, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x700236fe, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700236fe, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.340] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.340] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc3d8 [0031.340] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.340] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.340] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc318 [0031.341] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.341] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.341] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.341] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.341] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.341] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.341] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.341] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.341] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.341] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.342] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.342] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.342] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.342] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.342] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.342] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.342] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.342] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.342] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.342] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.342] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.343] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.343] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.343] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.343] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.343] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.343] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.343] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.343] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.343] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.343] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.343] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.344] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0031.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x700236fe, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700236fe, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x700236fe, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700236fe, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.344] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.344] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc498 [0031.344] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.345] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0031.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.345] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc298 [0031.345] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.345] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.345] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.345] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.345] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.345] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.346] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.346] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.346] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.346] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.346] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.346] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.346] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.346] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.346] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.346] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.346] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.346] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.347] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.347] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.347] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.347] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.347] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.347] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.347] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.347] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.347] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.347] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.347] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.348] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.348] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.348] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.348] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0031.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", lpFilePart=0x0) returned 0x31 [0031.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.348] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\aeghbubms5ntl.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.348] GetFileType (hFile=0x2a4) returned 0x1 [0031.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.348] GetFileType (hFile=0x2a4) returned 0x1 [0031.348] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x11137 [0031.349] ReadFile (in: hFile=0x2a4, lpBuffer=0x20be784, nNumberOfBytesToRead=0x11137, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x20be784*, lpNumberOfBytesRead=0x33e984*=0x11137, lpOverlapped=0x0) returned 1 [0031.349] CloseHandle (hObject=0x2a4) returned 1 [0031.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", lpFilePart=0x0) returned 0x36 [0031.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.351] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\aeghbubms5ntl.pptx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.351] GetFileType (hFile=0x2a4) returned 0x1 [0031.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.352] GetFileType (hFile=0x2a4) returned 0x1 [0031.352] WriteFile (in: hFile=0x2a4, lpBuffer=0x20cfe7c*, nNumberOfBytesToWrite=0x11140, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20cfe7c*, lpNumberOfBytesWritten=0x33e974*=0x11140, lpOverlapped=0x0) returned 1 [0031.353] CloseHandle (hObject=0x2a4) returned 1 [0031.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70049962, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70049962, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70049962, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70049962, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.355] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.355] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc1d8 [0031.355] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.355] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.356] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc498 [0031.356] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.356] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.356] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.356] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.356] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.356] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.356] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.356] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.356] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.357] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.357] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.357] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.357] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.357] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.357] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.357] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.357] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.357] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.357] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.357] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.357] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.358] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.358] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.358] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.358] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.358] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.358] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.358] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.358] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.358] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.358] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.358] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.358] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.359] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0031.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", lpFilePart=0x0) returned 0x31 [0031.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", lpFilePart=0x0) returned 0x31 [0031.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", lpFilePart=0x0) returned 0x31 [0031.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", lpFilePart=0x0) returned 0x31 [0031.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\aeghbubms5ntl.pptx"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb8a2760, ftCreationTime.dwHighDateTime=0x1d38454, ftLastAccessTime.dwLowDateTime=0xc4d3e0a0, ftLastAccessTime.dwHighDateTime=0x1d3092b, ftLastWriteTime.dwLowDateTime=0xc4d3e0a0, ftLastWriteTime.dwHighDateTime=0x1d3092b, nFileSizeHigh=0x0, nFileSizeLow=0x11137)) returned 1 [0031.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", lpFilePart=0x0) returned 0x31 [0031.359] GetFullPathNameW (in: lpFileName="AEghbUBMs5NTL.pptx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AEghbUBMs5NTL.pptx", lpFilePart=0x0) returned 0x2f [0031.359] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc4d8 [0031.359] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.359] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0031.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", lpFilePart=0x0) returned 0x31 [0031.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", lpFilePart=0x0) returned 0x31 [0031.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", lpFilePart=0x0) returned 0x31 [0031.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\aeghbubms5ntl.pptx"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb8a2760, ftCreationTime.dwHighDateTime=0x1d38454, ftLastAccessTime.dwLowDateTime=0xc4d3e0a0, ftLastAccessTime.dwHighDateTime=0x1d3092b, ftLastWriteTime.dwLowDateTime=0xc4d3e0a0, ftLastWriteTime.dwHighDateTime=0x1d3092b, nFileSizeHigh=0x0, nFileSizeLow=0x11137)) returned 1 [0031.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", lpFilePart=0x0) returned 0x31 [0031.360] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\aeghbubms5ntl.pptx")) returned 1 [0031.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70049962, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70049962, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70049962, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70049962, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.362] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.362] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc518 [0031.362] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.362] FindClose (in: hFindFile=0x4dc518 | out: hFindFile=0x4dc518) returned 1 [0031.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.362] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc7d8 [0031.362] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.362] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.362] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.362] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.363] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.363] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.363] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.363] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.363] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.363] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.363] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.363] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.363] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.363] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.363] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.363] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.364] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.364] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.364] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.364] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.364] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.364] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.364] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.364] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.364] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.365] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.365] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.365] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.365] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.365] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.365] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.365] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.365] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70049962, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70049962, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70049962, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70049962, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.366] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.366] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc3d8 [0031.366] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.366] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.367] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc6d8 [0031.367] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.367] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.367] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.367] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.367] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.367] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.367] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.367] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.367] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.368] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.368] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.368] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.368] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.368] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.368] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.368] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.368] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.368] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.368] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.368] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.369] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.369] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.369] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.369] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.369] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.369] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.369] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.369] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.370] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.370] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.370] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.370] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.370] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0031.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", lpFilePart=0x0) returned 0x37 [0031.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.370] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\c94gq1vfwvfbcdgwkd_.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.370] GetFileType (hFile=0x2a4) returned 0x1 [0031.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.370] GetFileType (hFile=0x2a4) returned 0x1 [0031.370] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x1570d [0031.371] ReadFile (in: hFile=0x2a4, lpBuffer=0x3057570, nNumberOfBytesToRead=0x1570d, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x3057570*, lpNumberOfBytesRead=0x33e984*=0x1570d, lpOverlapped=0x0) returned 1 [0031.371] CloseHandle (hObject=0x2a4) returned 1 [0031.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", lpFilePart=0x0) returned 0x3c [0031.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.374] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\c94gq1vfwvfbcdgwkd_.docx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.374] GetFileType (hFile=0x2a4) returned 0x1 [0031.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.374] GetFileType (hFile=0x2a4) returned 0x1 [0031.374] WriteFile (in: hFile=0x2a4, lpBuffer=0x306cca0*, nNumberOfBytesToWrite=0x15710, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x306cca0*, lpNumberOfBytesWritten=0x33e974*=0x15710, lpOverlapped=0x0) returned 1 [0031.375] CloseHandle (hObject=0x2a4) returned 1 [0031.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7006fb69, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7006fb69, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7006fb69, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7006fb69, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.378] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.378] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc318 [0031.378] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.378] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0031.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.378] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc898 [0031.379] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.379] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.379] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.379] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.379] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.379] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.379] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.379] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.379] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.379] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.379] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.380] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.380] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.380] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.380] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.380] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.380] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.380] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.380] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.380] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.380] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.380] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.382] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0031.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", lpFilePart=0x0) returned 0x37 [0031.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", lpFilePart=0x0) returned 0x37 [0031.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", lpFilePart=0x0) returned 0x37 [0031.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", lpFilePart=0x0) returned 0x37 [0031.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\c94gq1vfwvfbcdgwkd_.docx"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd8e06e0, ftCreationTime.dwHighDateTime=0x1d31737, ftLastAccessTime.dwLowDateTime=0x15df6940, ftLastAccessTime.dwHighDateTime=0x1d35e1a, ftLastWriteTime.dwLowDateTime=0x15df6940, ftLastWriteTime.dwHighDateTime=0x1d35e1a, nFileSizeHigh=0x0, nFileSizeLow=0x1570d)) returned 1 [0031.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", lpFilePart=0x0) returned 0x37 [0031.382] GetFullPathNameW (in: lpFileName="c94gQ1vFwVFBcDGwkD_.docx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c94gQ1vFwVFBcDGwkD_.docx", lpFilePart=0x0) returned 0x35 [0031.383] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc898 [0031.383] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.383] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0031.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", lpFilePart=0x0) returned 0x37 [0031.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", lpFilePart=0x0) returned 0x37 [0031.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", lpFilePart=0x0) returned 0x37 [0031.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\c94gq1vfwvfbcdgwkd_.docx"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd8e06e0, ftCreationTime.dwHighDateTime=0x1d31737, ftLastAccessTime.dwLowDateTime=0x15df6940, ftLastAccessTime.dwHighDateTime=0x1d35e1a, ftLastWriteTime.dwLowDateTime=0x15df6940, ftLastWriteTime.dwHighDateTime=0x1d35e1a, nFileSizeHigh=0x0, nFileSizeLow=0x1570d)) returned 1 [0031.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx", lpFilePart=0x0) returned 0x37 [0031.383] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\c94gq1vfwvfbcdgwkd_.docx")) returned 1 [0031.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70095e0c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70095e0c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70095e0c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70095e0c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.385] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.385] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc358 [0031.385] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.385] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.385] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc7d8 [0031.386] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.386] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.386] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.386] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.386] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.386] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.386] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.386] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.386] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.386] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.386] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.386] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.387] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.387] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.387] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.387] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.387] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.387] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.387] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.387] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.387] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.387] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.387] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.388] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.388] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.388] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.388] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.388] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.388] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.388] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.388] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.388] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.388] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70095e0c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70095e0c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70095e0c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70095e0c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.389] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.389] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc8d8 [0031.389] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.389] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0031.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.390] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc7d8 [0031.390] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.390] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.390] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.390] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.390] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.391] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.391] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.391] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.391] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.391] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.391] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.391] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.391] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.391] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.391] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.391] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.392] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.392] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.392] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.392] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.392] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.392] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.392] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.392] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.392] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.392] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.392] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.393] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.393] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.393] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.393] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.393] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.393] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2a [0031.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.393] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini" (normalized: "c:\\users\\5jghkoaofdp\\documents\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.393] GetFileType (hFile=0x2a4) returned 0x1 [0031.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.393] GetFileType (hFile=0x2a4) returned 0x1 [0031.393] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x192 [0031.393] ReadFile (in: hFile=0x2a4, lpBuffer=0x2107010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x2107010*, lpNumberOfBytesRead=0x33e984*=0x192, lpOverlapped=0x0) returned 1 [0031.394] CloseHandle (hObject=0x2a4) returned 1 [0031.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2f [0031.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.394] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\desktop.ini.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.395] GetFileType (hFile=0x2a4) returned 0x1 [0031.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.395] GetFileType (hFile=0x2a4) returned 0x1 [0031.395] WriteFile (in: hFile=0x2a4, lpBuffer=0x2108888*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x2108888*, lpNumberOfBytesWritten=0x33e948*=0x1a0, lpOverlapped=0x0) returned 1 [0031.395] CloseHandle (hObject=0x2a4) returned 1 [0031.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70095e0c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70095e0c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70095e0c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70095e0c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.396] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.396] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc498 [0031.397] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.397] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0031.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.397] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc7d8 [0031.397] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.397] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.397] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.397] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.397] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.398] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.398] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.398] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.398] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.398] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.398] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.398] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.398] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.398] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.398] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.398] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.398] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.399] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.399] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.399] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.399] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.399] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.399] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.399] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.399] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.399] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.399] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.399] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.399] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.400] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.400] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.400] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.400] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.400] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2a [0031.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2a [0031.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2a [0031.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2a [0031.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini" (normalized: "c:\\users\\5jghkoaofdp\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe2a0a1c, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xfe2a0a1c, ftLastAccessTime.dwHighDateTime=0x1d2ced7, ftLastWriteTime.dwLowDateTime=0x53bfc153, ftLastWriteTime.dwHighDateTime=0x1d310a2, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0031.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2a [0031.400] GetFullPathNameW (in: lpFileName="desktop.ini", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x28 [0031.400] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc218 [0031.401] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.401] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0031.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2a [0031.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2a [0031.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2a [0031.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini" (normalized: "c:\\users\\5jghkoaofdp\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe2a0a1c, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xfe2a0a1c, ftLastAccessTime.dwHighDateTime=0x1d2ced7, ftLastWriteTime.dwLowDateTime=0x53bfc153, ftLastWriteTime.dwHighDateTime=0x1d310a2, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0031.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2a [0031.401] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini" (normalized: "c:\\users\\5jghkoaofdp\\documents\\desktop.ini")) returned 1 [0031.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x700bc079, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700bc079, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x700bc079, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700bc079, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.402] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.402] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc898 [0031.402] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.402] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0031.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.403] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc298 [0031.403] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.403] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.403] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.403] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.403] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.404] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.404] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.404] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.404] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.404] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.404] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.404] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.404] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.404] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.404] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.404] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.404] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.405] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.405] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.405] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.405] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.405] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.405] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.405] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.405] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.405] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.405] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.405] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.406] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.406] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.406] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.406] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.406] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0031.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x700bc079, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700bc079, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x700bc079, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700bc079, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0031.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.407] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.407] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc218 [0031.407] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.407] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0031.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.407] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc2d8 [0031.407] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.407] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.407] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.408] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.408] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.408] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.408] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.408] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.408] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.408] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.408] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.408] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.408] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.408] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.408] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.408] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.409] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.409] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.409] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.409] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.409] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.409] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.409] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.409] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.409] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.409] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.409] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.410] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.410] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.410] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.410] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.410] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.410] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", lpFilePart=0x0) returned 0x32 [0031.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.410] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\erhcl a2gbl1at.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.410] GetFileType (hFile=0x2a4) returned 0x1 [0031.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.410] GetFileType (hFile=0x2a4) returned 0x1 [0031.410] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0xc379 [0031.411] ReadFile (in: hFile=0x2a4, lpBuffer=0x211c280, nNumberOfBytesToRead=0xc379, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x211c280*, lpNumberOfBytesRead=0x33e984*=0xc379, lpOverlapped=0x0) returned 1 [0031.411] CloseHandle (hObject=0x2a4) returned 1 [0031.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", lpFilePart=0x0) returned 0x37 [0031.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.413] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\erhcl a2gbl1at.docx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.414] GetFileType (hFile=0x2a4) returned 0x1 [0031.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.414] GetFileType (hFile=0x2a4) returned 0x1 [0031.414] WriteFile (in: hFile=0x2a4, lpBuffer=0x2128bb8*, nNumberOfBytesToWrite=0xc380, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x2128bb8*, lpNumberOfBytesWritten=0x33e974*=0xc380, lpOverlapped=0x0) returned 1 [0031.415] CloseHandle (hObject=0x2a4) returned 1 [0031.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x700e22ad, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700e22ad, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x700e22ad, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700e22ad, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.417] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.417] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc3d8 [0031.417] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.417] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.418] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc2d8 [0031.418] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.418] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.418] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.418] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.418] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.418] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.418] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.418] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.418] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.418] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.419] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.419] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.419] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.419] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.419] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.419] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.419] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.419] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.419] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.419] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.419] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.420] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.420] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.420] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.420] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.420] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.420] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.420] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.420] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.420] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.420] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.420] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.420] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.421] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", lpFilePart=0x0) returned 0x32 [0031.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", lpFilePart=0x0) returned 0x32 [0031.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", lpFilePart=0x0) returned 0x32 [0031.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", lpFilePart=0x0) returned 0x32 [0031.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\erhcl a2gbl1at.docx"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88da2030, ftCreationTime.dwHighDateTime=0x1d34654, ftLastAccessTime.dwLowDateTime=0x40d422c0, ftLastAccessTime.dwHighDateTime=0x1d3781f, ftLastWriteTime.dwLowDateTime=0x40d422c0, ftLastWriteTime.dwHighDateTime=0x1d3781f, nFileSizeHigh=0x0, nFileSizeLow=0xc379)) returned 1 [0031.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", lpFilePart=0x0) returned 0x32 [0031.421] GetFullPathNameW (in: lpFileName="erHcl A2gBL1aT.docx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\erHcl A2gBL1aT.docx", lpFilePart=0x0) returned 0x30 [0031.421] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc498 [0031.421] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.421] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0031.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", lpFilePart=0x0) returned 0x32 [0031.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", lpFilePart=0x0) returned 0x32 [0031.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", lpFilePart=0x0) returned 0x32 [0031.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\erhcl a2gbl1at.docx"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88da2030, ftCreationTime.dwHighDateTime=0x1d34654, ftLastAccessTime.dwLowDateTime=0x40d422c0, ftLastAccessTime.dwHighDateTime=0x1d3781f, ftLastWriteTime.dwLowDateTime=0x40d422c0, ftLastWriteTime.dwHighDateTime=0x1d3781f, nFileSizeHigh=0x0, nFileSizeLow=0xc379)) returned 1 [0031.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", lpFilePart=0x0) returned 0x32 [0031.422] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\erhcl a2gbl1at.docx")) returned 1 [0031.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x700e22ad, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700e22ad, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x700e22ad, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700e22ad, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.423] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.423] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc358 [0031.423] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.423] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.424] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc298 [0031.424] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.424] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.424] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.424] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.424] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.424] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.424] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.424] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.424] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.425] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.425] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.425] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.425] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.425] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.425] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.425] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.425] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.425] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.425] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.426] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.426] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.426] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.426] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.426] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.426] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.426] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.426] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.426] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.426] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.426] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.426] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.427] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.427] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0031.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x700e22ad, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700e22ad, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x700e22ad, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700e22ad, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.428] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.428] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc8d8 [0031.428] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.428] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0031.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.428] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc358 [0031.428] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.428] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.429] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.429] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.429] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.429] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.429] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.429] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.429] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.429] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.429] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.429] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.429] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.429] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.429] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.430] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.430] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.430] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.430] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.430] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.430] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.430] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.430] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.430] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.430] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.430] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.431] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.431] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.431] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.431] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.431] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.431] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.431] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", lpFilePart=0x0) returned 0x2d [0031.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.431] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\eyedf199l.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.431] GetFileType (hFile=0x2a4) returned 0x1 [0031.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.432] GetFileType (hFile=0x2a4) returned 0x1 [0031.432] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x16988 [0031.432] ReadFile (in: hFile=0x2a4, lpBuffer=0x30823d0, nNumberOfBytesToRead=0x16988, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x30823d0*, lpNumberOfBytesRead=0x33e984*=0x16988, lpOverlapped=0x0) returned 1 [0031.432] CloseHandle (hObject=0x2a4) returned 1 [0031.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", lpFilePart=0x0) returned 0x32 [0031.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.435] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\eyedf199l.xlsx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.435] GetFileType (hFile=0x2a4) returned 0x1 [0031.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.435] GetFileType (hFile=0x2a4) returned 0x1 [0031.435] WriteFile (in: hFile=0x2a4, lpBuffer=0x3098d78*, nNumberOfBytesToWrite=0x16990, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x3098d78*, lpNumberOfBytesWritten=0x33e974*=0x16990, lpOverlapped=0x0) returned 1 [0031.438] CloseHandle (hObject=0x2a4) returned 1 [0031.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7010852d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7010852d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7010852d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7010852d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.440] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.440] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc3d8 [0031.440] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.440] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.441] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc7d8 [0031.441] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.441] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.441] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.441] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.441] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.441] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.441] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.441] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.442] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.442] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.442] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.442] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.442] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.442] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.442] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.442] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.442] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.442] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.442] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.442] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.442] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.443] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.443] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.443] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.443] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.443] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.443] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.443] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.443] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.443] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.443] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.443] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.444] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.444] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", lpFilePart=0x0) returned 0x2d [0031.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", lpFilePart=0x0) returned 0x2d [0031.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", lpFilePart=0x0) returned 0x2d [0031.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", lpFilePart=0x0) returned 0x2d [0031.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\eyedf199l.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b3dd90, ftCreationTime.dwHighDateTime=0x1d336ec, ftLastAccessTime.dwLowDateTime=0x9bbe9ea0, ftLastAccessTime.dwHighDateTime=0x1d35d89, ftLastWriteTime.dwLowDateTime=0x9bbe9ea0, ftLastWriteTime.dwHighDateTime=0x1d35d89, nFileSizeHigh=0x0, nFileSizeLow=0x16988)) returned 1 [0031.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", lpFilePart=0x0) returned 0x2d [0031.444] GetFullPathNameW (in: lpFileName="eYeDf199l.xlsx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\eYeDf199l.xlsx", lpFilePart=0x0) returned 0x2b [0031.444] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc2d8 [0031.444] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.445] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", lpFilePart=0x0) returned 0x2d [0031.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", lpFilePart=0x0) returned 0x2d [0031.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", lpFilePart=0x0) returned 0x2d [0031.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\eyedf199l.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b3dd90, ftCreationTime.dwHighDateTime=0x1d336ec, ftLastAccessTime.dwLowDateTime=0x9bbe9ea0, ftLastAccessTime.dwHighDateTime=0x1d35d89, ftLastWriteTime.dwLowDateTime=0x9bbe9ea0, ftLastWriteTime.dwHighDateTime=0x1d35d89, nFileSizeHigh=0x0, nFileSizeLow=0x16988)) returned 1 [0031.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", lpFilePart=0x0) returned 0x2d [0031.445] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\eyedf199l.xlsx")) returned 1 [0031.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7012e76a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7012e76a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7012e76a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7012e76a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.446] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.446] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc3d8 [0031.446] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.447] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.447] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc318 [0031.447] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.447] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.447] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.447] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.447] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.447] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.447] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.448] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.448] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.448] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.448] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.448] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.448] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.448] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.448] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.448] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.448] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.449] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.449] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.449] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.449] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.449] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.449] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.449] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.449] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.449] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.449] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.449] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.449] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.450] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.450] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.450] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.450] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0031.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7012e76a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7012e76a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7012e76a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7012e76a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.450] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.450] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc7d8 [0031.451] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.451] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.451] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc518 [0031.451] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.451] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.451] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.451] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.451] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.452] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.452] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.452] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.452] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.452] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.452] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.452] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.452] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.452] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.452] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.452] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.452] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.452] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.453] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.453] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.453] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.453] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.453] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.453] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.453] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.453] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.453] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.453] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.453] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.453] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.454] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.454] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.454] FindClose (in: hFindFile=0x4dc518 | out: hFindFile=0x4dc518) returned 1 [0031.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", lpFilePart=0x0) returned 0x2d [0031.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.454] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\g 5zx6m5n.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.454] GetFileType (hFile=0x2a4) returned 0x1 [0031.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.454] GetFileType (hFile=0x2a4) returned 0x1 [0031.454] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x3aeb [0031.454] ReadFile (in: hFile=0x2a4, lpBuffer=0x215aed4, nNumberOfBytesToRead=0x3aeb, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x215aed4*, lpNumberOfBytesRead=0x33e984*=0x3aeb, lpOverlapped=0x0) returned 1 [0031.454] CloseHandle (hObject=0x2a4) returned 1 [0031.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", lpFilePart=0x0) returned 0x32 [0031.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.455] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\g 5zx6m5n.docx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.455] GetFileType (hFile=0x2a4) returned 0x1 [0031.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.456] GetFileType (hFile=0x2a4) returned 0x1 [0031.456] WriteFile (in: hFile=0x2a4, lpBuffer=0x215ef74*, nNumberOfBytesToWrite=0x3af0, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x215ef74*, lpNumberOfBytesWritten=0x33e974*=0x3af0, lpOverlapped=0x0) returned 1 [0031.456] CloseHandle (hObject=0x2a4) returned 1 [0031.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7012e76a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7012e76a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7012e76a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7012e76a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.457] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.457] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc7d8 [0031.458] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.458] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.458] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc2d8 [0031.458] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.458] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.458] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.458] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.458] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.458] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.459] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.459] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.459] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.459] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.459] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.459] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.459] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.459] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.459] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.459] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.459] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.459] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.460] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.460] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.460] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.460] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.460] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.460] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.460] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.461] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.461] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.461] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.461] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.461] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.461] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.461] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.461] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.461] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", lpFilePart=0x0) returned 0x2d [0031.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", lpFilePart=0x0) returned 0x2d [0031.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", lpFilePart=0x0) returned 0x2d [0031.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", lpFilePart=0x0) returned 0x2d [0031.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\g 5zx6m5n.docx"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6830520, ftCreationTime.dwHighDateTime=0x1d3049b, ftLastAccessTime.dwLowDateTime=0x7222a8e0, ftLastAccessTime.dwHighDateTime=0x1d3481a, ftLastWriteTime.dwLowDateTime=0x7222a8e0, ftLastWriteTime.dwHighDateTime=0x1d3481a, nFileSizeHigh=0x0, nFileSizeLow=0x3aeb)) returned 1 [0031.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", lpFilePart=0x0) returned 0x2d [0031.462] GetFullPathNameW (in: lpFileName="G 5ZX6m5N.docx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\G 5ZX6m5N.docx", lpFilePart=0x0) returned 0x2b [0031.462] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc898 [0031.462] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.462] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0031.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", lpFilePart=0x0) returned 0x2d [0031.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", lpFilePart=0x0) returned 0x2d [0031.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", lpFilePart=0x0) returned 0x2d [0031.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\g 5zx6m5n.docx"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6830520, ftCreationTime.dwHighDateTime=0x1d3049b, ftLastAccessTime.dwLowDateTime=0x7222a8e0, ftLastAccessTime.dwHighDateTime=0x1d3481a, ftLastWriteTime.dwLowDateTime=0x7222a8e0, ftLastWriteTime.dwHighDateTime=0x1d3481a, nFileSizeHigh=0x0, nFileSizeLow=0x3aeb)) returned 1 [0031.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", lpFilePart=0x0) returned 0x2d [0031.462] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\g 5zx6m5n.docx")) returned 1 [0031.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7015498d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7015498d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7015498d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7015498d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.464] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.464] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc7d8 [0031.464] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.464] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.464] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc7d8 [0031.464] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.464] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.464] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.465] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.465] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.465] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.465] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.465] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.465] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.465] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.465] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.465] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.465] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.465] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.465] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.465] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.466] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.466] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.466] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.466] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.466] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.466] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.466] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.466] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.466] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.466] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.466] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.467] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.467] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.467] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.467] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.467] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.467] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7015498d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7015498d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7015498d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7015498d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.468] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.468] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc2d8 [0031.468] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.468] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.468] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc7d8 [0031.468] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.468] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.468] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.469] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.469] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.469] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.469] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.469] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.469] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.469] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.469] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.469] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.469] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.470] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.470] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.470] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.470] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.470] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.470] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.470] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.470] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.470] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.470] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.470] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.470] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.471] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.471] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.471] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.471] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.471] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.471] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.471] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.471] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", lpFilePart=0x0) returned 0x28 [0031.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.471] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\gmur.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.471] GetFileType (hFile=0x2a4) returned 0x1 [0031.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.471] GetFileType (hFile=0x2a4) returned 0x1 [0031.472] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x1386d [0031.472] ReadFile (in: hFile=0x2a4, lpBuffer=0x2175740, nNumberOfBytesToRead=0x1386d, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x2175740*, lpNumberOfBytesRead=0x33e984*=0x1386d, lpOverlapped=0x0) returned 1 [0031.472] CloseHandle (hObject=0x2a4) returned 1 [0031.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx.Lime", lpFilePart=0x0) returned 0x2d [0031.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.475] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\gmur.xlsx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.475] GetFileType (hFile=0x2a4) returned 0x1 [0031.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.475] GetFileType (hFile=0x2a4) returned 0x1 [0031.475] WriteFile (in: hFile=0x2a4, lpBuffer=0x2189554*, nNumberOfBytesToWrite=0x13870, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x2189554*, lpNumberOfBytesWritten=0x33e974*=0x13870, lpOverlapped=0x0) returned 1 [0031.476] CloseHandle (hObject=0x2a4) returned 1 [0031.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7015498d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7015498d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7015498d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7015498d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.478] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.478] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc7d8 [0031.478] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.478] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.478] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc3d8 [0031.479] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.479] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.479] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.479] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.479] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.479] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.479] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.479] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.479] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.479] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.479] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.479] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.480] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.480] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.480] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.480] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.480] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.480] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.480] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.480] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.480] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.480] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.480] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.480] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.481] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.481] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.481] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.481] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.481] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.481] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.481] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.481] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.481] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.481] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", lpFilePart=0x0) returned 0x28 [0031.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", lpFilePart=0x0) returned 0x28 [0031.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", lpFilePart=0x0) returned 0x28 [0031.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", lpFilePart=0x0) returned 0x28 [0031.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\gmur.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78796f30, ftCreationTime.dwHighDateTime=0x1d358dc, ftLastAccessTime.dwLowDateTime=0xe414650, ftLastAccessTime.dwHighDateTime=0x1d33795, ftLastWriteTime.dwLowDateTime=0xe414650, ftLastWriteTime.dwHighDateTime=0x1d33795, nFileSizeHigh=0x0, nFileSizeLow=0x1386d)) returned 1 [0031.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", lpFilePart=0x0) returned 0x28 [0031.482] GetFullPathNameW (in: lpFileName="gMur.xlsx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\gMur.xlsx", lpFilePart=0x0) returned 0x26 [0031.482] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc358 [0031.482] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.482] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", lpFilePart=0x0) returned 0x28 [0031.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", lpFilePart=0x0) returned 0x28 [0031.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", lpFilePart=0x0) returned 0x28 [0031.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\gmur.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78796f30, ftCreationTime.dwHighDateTime=0x1d358dc, ftLastAccessTime.dwLowDateTime=0xe414650, ftLastAccessTime.dwHighDateTime=0x1d33795, ftLastWriteTime.dwLowDateTime=0xe414650, ftLastWriteTime.dwHighDateTime=0x1d33795, nFileSizeHigh=0x0, nFileSizeLow=0x1386d)) returned 1 [0031.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", lpFilePart=0x0) returned 0x28 [0031.483] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\gmur.xlsx")) returned 1 [0031.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7017abb6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7017abb6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7017abb6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7017abb6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.484] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.484] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc558 [0031.484] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.484] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0031.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.485] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc358 [0031.485] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.485] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.485] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.485] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.485] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.485] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.485] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.485] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.485] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.485] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.486] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.486] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.486] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.486] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.486] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.486] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.486] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.486] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.486] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.486] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.486] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.486] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.487] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.487] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.487] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.487] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.487] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.487] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.487] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.487] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.487] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.487] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.487] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7017abb6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7017abb6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7017abb6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7017abb6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.488] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.488] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc518 [0031.488] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.488] FindClose (in: hFindFile=0x4dc518 | out: hFindFile=0x4dc518) returned 1 [0031.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.488] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc7d8 [0031.489] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.489] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.489] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.489] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.489] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.489] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.489] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.489] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.489] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.489] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.489] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.489] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.490] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.490] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.490] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.490] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.490] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.490] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.490] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.490] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.490] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.490] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.490] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.490] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.491] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.491] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.491] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.491] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.491] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.491] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.491] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.491] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.491] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", lpFilePart=0x0) returned 0x31 [0031.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.491] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\h2pcxtbbfd di.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.491] GetFileType (hFile=0x2a4) returned 0x1 [0031.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.491] GetFileType (hFile=0x2a4) returned 0x1 [0031.492] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0xf5c4 [0031.492] ReadFile (in: hFile=0x2a4, lpBuffer=0x21afa18, nNumberOfBytesToRead=0xf5c4, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x21afa18*, lpNumberOfBytesRead=0x33e984*=0xf5c4, lpOverlapped=0x0) returned 1 [0031.492] CloseHandle (hObject=0x2a4) returned 1 [0031.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", lpFilePart=0x0) returned 0x36 [0031.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.494] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\h2pcxtbbfd di.xlsx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.494] GetFileType (hFile=0x2a4) returned 0x1 [0031.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.494] GetFileType (hFile=0x2a4) returned 0x1 [0031.494] WriteFile (in: hFile=0x2a4, lpBuffer=0x21bf59c*, nNumberOfBytesToWrite=0xf5d0, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x21bf59c*, lpNumberOfBytesWritten=0x33e974*=0xf5d0, lpOverlapped=0x0) returned 1 [0031.495] CloseHandle (hObject=0x2a4) returned 1 [0031.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x701a0e3f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701a0e3f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x701a0e3f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701a0e3f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.497] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.497] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc3d8 [0031.497] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.497] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.497] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc358 [0031.497] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.498] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.498] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.498] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.498] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.498] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.498] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.498] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.498] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.498] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.498] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.498] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.498] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.498] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.499] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.499] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.499] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.499] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.499] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.499] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.499] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.499] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.499] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.499] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.499] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.499] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.500] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.500] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.500] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.500] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.500] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.500] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.500] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.500] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", lpFilePart=0x0) returned 0x31 [0031.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", lpFilePart=0x0) returned 0x31 [0031.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", lpFilePart=0x0) returned 0x31 [0031.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", lpFilePart=0x0) returned 0x31 [0031.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\h2pcxtbbfd di.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd71a0500, ftCreationTime.dwHighDateTime=0x1d33d24, ftLastAccessTime.dwLowDateTime=0x80355d0, ftLastAccessTime.dwHighDateTime=0x1d3702a, ftLastWriteTime.dwLowDateTime=0x80355d0, ftLastWriteTime.dwHighDateTime=0x1d3702a, nFileSizeHigh=0x0, nFileSizeLow=0xf5c4)) returned 1 [0031.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", lpFilePart=0x0) returned 0x31 [0031.500] GetFullPathNameW (in: lpFileName="h2PCXTBBfD dI.xlsx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\h2PCXTBBfD dI.xlsx", lpFilePart=0x0) returned 0x2f [0031.500] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc7d8 [0031.500] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.500] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", lpFilePart=0x0) returned 0x31 [0031.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", lpFilePart=0x0) returned 0x31 [0031.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", lpFilePart=0x0) returned 0x31 [0031.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\h2pcxtbbfd di.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd71a0500, ftCreationTime.dwHighDateTime=0x1d33d24, ftLastAccessTime.dwLowDateTime=0x80355d0, ftLastAccessTime.dwHighDateTime=0x1d3702a, ftLastWriteTime.dwLowDateTime=0x80355d0, ftLastWriteTime.dwHighDateTime=0x1d3702a, nFileSizeHigh=0x0, nFileSizeLow=0xf5c4)) returned 1 [0031.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", lpFilePart=0x0) returned 0x31 [0031.501] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\h2pcxtbbfd di.xlsx")) returned 1 [0031.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x701a0e3f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701a0e3f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x701a0e3f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701a0e3f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.502] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.502] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc358 [0031.502] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.502] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.503] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc358 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.503] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.504] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.504] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.504] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x701a0e3f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701a0e3f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x701a0e3f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701a0e3f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.504] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.504] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc458 [0031.504] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.504] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0031.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.505] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.505] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.505] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.505] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc7d8 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.505] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.506] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.506] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.506] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.506] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.506] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.506] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.506] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.506] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.506] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.506] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.506] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.506] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.506] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.506] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", lpFilePart=0x0) returned 0x31 [0031.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.506] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\iydmli-q8mf8cj.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.506] GetFileType (hFile=0x2a4) returned 0x1 [0031.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.506] GetFileType (hFile=0x2a4) returned 0x1 [0031.506] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x4e64 [0031.507] ReadFile (in: hFile=0x2a4, lpBuffer=0x21e1a14, nNumberOfBytesToRead=0x4e64, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x21e1a14*, lpNumberOfBytesRead=0x33e984*=0x4e64, lpOverlapped=0x0) returned 1 [0031.507] CloseHandle (hObject=0x2a4) returned 1 [0031.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", lpFilePart=0x0) returned 0x36 [0031.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.508] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\iydmli-q8mf8cj.ppt.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.508] GetFileType (hFile=0x2a4) returned 0x1 [0031.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.508] GetFileType (hFile=0x2a4) returned 0x1 [0031.508] WriteFile (in: hFile=0x2a4, lpBuffer=0x21e6e38*, nNumberOfBytesToWrite=0x4e70, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x21e6e38*, lpNumberOfBytesWritten=0x33e974*=0x4e70, lpOverlapped=0x0) returned 1 [0031.509] CloseHandle (hObject=0x2a4) returned 1 [0031.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x701c714e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701c714e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x701c714e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701c714e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.510] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.510] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc518 [0031.510] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.510] FindClose (in: hFindFile=0x4dc518 | out: hFindFile=0x4dc518) returned 1 [0031.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.511] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc7d8 [0031.511] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.511] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.511] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.511] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.511] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.511] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.511] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.511] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.513] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.513] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.513] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.513] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.513] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.513] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.513] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.513] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.513] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.513] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.513] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.513] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.514] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.514] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", lpFilePart=0x0) returned 0x31 [0031.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", lpFilePart=0x0) returned 0x31 [0031.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", lpFilePart=0x0) returned 0x31 [0031.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", lpFilePart=0x0) returned 0x31 [0031.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\iydmli-q8mf8cj.ppt"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb500c3a0, ftCreationTime.dwHighDateTime=0x1d3568d, ftLastAccessTime.dwLowDateTime=0x82ec6f30, ftLastAccessTime.dwHighDateTime=0x1d352ce, ftLastWriteTime.dwLowDateTime=0x82ec6f30, ftLastWriteTime.dwHighDateTime=0x1d352ce, nFileSizeHigh=0x0, nFileSizeLow=0x4e64)) returned 1 [0031.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", lpFilePart=0x0) returned 0x31 [0031.514] GetFullPathNameW (in: lpFileName="IYDMli-q8mF8cJ.ppt", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\IYDMli-q8mF8cJ.ppt", lpFilePart=0x0) returned 0x2f [0031.514] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc558 [0031.515] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.515] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0031.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", lpFilePart=0x0) returned 0x31 [0031.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", lpFilePart=0x0) returned 0x31 [0031.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", lpFilePart=0x0) returned 0x31 [0031.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\iydmli-q8mf8cj.ppt"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb500c3a0, ftCreationTime.dwHighDateTime=0x1d3568d, ftLastAccessTime.dwLowDateTime=0x82ec6f30, ftLastAccessTime.dwHighDateTime=0x1d352ce, ftLastWriteTime.dwLowDateTime=0x82ec6f30, ftLastWriteTime.dwHighDateTime=0x1d352ce, nFileSizeHigh=0x0, nFileSizeLow=0x4e64)) returned 1 [0031.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", lpFilePart=0x0) returned 0x31 [0031.515] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\iydmli-q8mf8cj.ppt")) returned 1 [0031.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x701c714e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701c714e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x701c714e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701c714e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.516] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.516] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc7d8 [0031.517] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.517] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.517] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc358 [0031.517] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.517] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.517] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.517] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.517] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.518] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.518] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.518] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.518] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.518] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.518] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.520] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x701c714e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701c714e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x701c714e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701c714e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.521] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.521] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc358 [0031.521] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.521] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc7d8 [0031.524] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", lpFilePart=0x0) returned 0x34 [0031.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.542] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", lpFilePart=0x0) returned 0x37 [0031.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.555] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc798 [0031.555] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.555] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.556] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc898 [0031.556] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.556] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.556] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.556] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.556] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.556] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.556] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.556] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.556] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.556] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.556] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.557] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.557] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.557] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.557] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.557] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.557] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.557] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.557] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.557] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.557] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.557] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.557] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.558] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.558] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.558] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.558] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.558] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.558] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.558] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.558] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.558] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.558] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.558] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0031.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", lpFilePart=0x0) returned 0x32 [0031.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", lpFilePart=0x0) returned 0x32 [0031.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", lpFilePart=0x0) returned 0x32 [0031.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", lpFilePart=0x0) returned 0x32 [0031.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\o9jfc-djnb qx4.pptx"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7adbb7a0, ftCreationTime.dwHighDateTime=0x1d33218, ftLastAccessTime.dwLowDateTime=0x2e13b600, ftLastAccessTime.dwHighDateTime=0x1d359b6, ftLastWriteTime.dwLowDateTime=0x2e13b600, ftLastWriteTime.dwHighDateTime=0x1d359b6, nFileSizeHigh=0x0, nFileSizeLow=0x6b14)) returned 1 [0031.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", lpFilePart=0x0) returned 0x32 [0031.559] GetFullPathNameW (in: lpFileName="o9Jfc-DjnB qX4.pptx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\o9Jfc-DjnB qX4.pptx", lpFilePart=0x0) returned 0x30 [0031.559] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc3d8 [0031.559] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.559] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", lpFilePart=0x0) returned 0x32 [0031.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", lpFilePart=0x0) returned 0x32 [0031.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", lpFilePart=0x0) returned 0x32 [0031.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\o9jfc-djnb qx4.pptx"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7adbb7a0, ftCreationTime.dwHighDateTime=0x1d33218, ftLastAccessTime.dwLowDateTime=0x2e13b600, ftLastAccessTime.dwHighDateTime=0x1d359b6, ftLastWriteTime.dwLowDateTime=0x2e13b600, ftLastWriteTime.dwHighDateTime=0x1d359b6, nFileSizeHigh=0x0, nFileSizeLow=0x6b14)) returned 1 [0031.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", lpFilePart=0x0) returned 0x32 [0031.560] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\o9jfc-djnb qx4.pptx")) returned 1 [0031.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702397cb, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702397cb, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702397cb, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702397cb, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.561] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.561] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc558 [0031.561] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.561] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0031.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.562] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc6d8 [0031.562] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.562] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.562] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.562] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.562] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.562] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.562] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.562] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.562] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.562] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.563] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.563] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.563] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.563] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.563] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.563] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.563] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.563] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.563] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.563] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.563] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.563] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.564] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.564] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.564] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.564] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.564] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.564] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.564] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.564] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.564] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.564] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.564] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0031.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702397cb, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702397cb, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702397cb, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702397cb, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.565] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.565] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc498 [0031.565] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.565] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0031.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.566] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc4d8 [0031.566] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.566] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.566] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.566] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.566] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.566] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.566] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.566] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.566] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.566] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.566] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.567] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.567] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.567] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.567] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.567] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.567] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.567] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.567] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.567] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.567] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.567] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.568] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.568] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.568] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.568] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.568] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.568] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.568] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.568] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.568] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.568] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.568] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0031.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", lpFilePart=0x0) returned 0x2e [0031.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.568] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oczespochpv.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.569] GetFileType (hFile=0x2a4) returned 0x1 [0031.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.569] GetFileType (hFile=0x2a4) returned 0x1 [0031.569] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x1859a [0031.569] ReadFile (in: hFile=0x2a4, lpBuffer=0x3159778, nNumberOfBytesToRead=0x1859a, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x3159778*, lpNumberOfBytesRead=0x33e984*=0x1859a, lpOverlapped=0x0) returned 1 [0031.572] CloseHandle (hObject=0x2a4) returned 1 [0031.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", lpFilePart=0x0) returned 0x33 [0031.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.575] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oczespochpv.csv.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.575] GetFileType (hFile=0x2a4) returned 0x1 [0031.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.575] GetFileType (hFile=0x2a4) returned 0x1 [0031.575] WriteFile (in: hFile=0x2a4, lpBuffer=0x3171d30*, nNumberOfBytesToWrite=0x185a0, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x3171d30*, lpNumberOfBytesWritten=0x33e974*=0x185a0, lpOverlapped=0x0) returned 1 [0031.576] CloseHandle (hObject=0x2a4) returned 1 [0031.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7025f9cc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7025f9cc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7025f9cc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7025f9cc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.579] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.579] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc318 [0031.579] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.579] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0031.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.579] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc498 [0031.579] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.580] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.580] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.580] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.580] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.580] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.580] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.580] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.580] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.580] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.580] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.580] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.580] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.580] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.580] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.581] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.582] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.582] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.582] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0031.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", lpFilePart=0x0) returned 0x2e [0031.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", lpFilePart=0x0) returned 0x2e [0031.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", lpFilePart=0x0) returned 0x2e [0031.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", lpFilePart=0x0) returned 0x2e [0031.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oczespochpv.csv"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70931b00, ftCreationTime.dwHighDateTime=0x1d35359, ftLastAccessTime.dwLowDateTime=0xb373a050, ftLastAccessTime.dwHighDateTime=0x1d34f00, ftLastWriteTime.dwLowDateTime=0xb373a050, ftLastWriteTime.dwHighDateTime=0x1d34f00, nFileSizeHigh=0x0, nFileSizeLow=0x1859a)) returned 1 [0031.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", lpFilePart=0x0) returned 0x2e [0031.582] GetFullPathNameW (in: lpFileName="OCZESPOCHPv.csv", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\OCZESPOCHPv.csv", lpFilePart=0x0) returned 0x2c [0031.582] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc358 [0031.582] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.582] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", lpFilePart=0x0) returned 0x2e [0031.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", lpFilePart=0x0) returned 0x2e [0031.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", lpFilePart=0x0) returned 0x2e [0031.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oczespochpv.csv"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70931b00, ftCreationTime.dwHighDateTime=0x1d35359, ftLastAccessTime.dwLowDateTime=0xb373a050, ftLastAccessTime.dwHighDateTime=0x1d34f00, ftLastWriteTime.dwLowDateTime=0xb373a050, ftLastWriteTime.dwHighDateTime=0x1d34f00, nFileSizeHigh=0x0, nFileSizeLow=0x1859a)) returned 1 [0031.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", lpFilePart=0x0) returned 0x2e [0031.582] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oczespochpv.csv")) returned 1 [0031.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7025f9cc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7025f9cc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7025f9cc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7025f9cc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.584] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.584] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc598 [0031.584] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.584] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0031.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.584] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc218 [0031.584] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.585] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.585] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0031.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7025f9cc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7025f9cc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7025f9cc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7025f9cc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.586] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.586] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc7d8 [0031.586] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.586] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.586] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc458 [0031.586] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.586] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.586] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.586] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.586] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.586] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.586] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.586] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.587] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.587] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0031.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", lpFilePart=0x0) returned 0x37 [0031.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.587] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oojiqe2ti5vbxcbhng2.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.587] GetFileType (hFile=0x2a4) returned 0x1 [0031.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.587] GetFileType (hFile=0x2a4) returned 0x1 [0031.587] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x6a6 [0031.587] ReadFile (in: hFile=0x2a4, lpBuffer=0x20580a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x20580a0*, lpNumberOfBytesRead=0x33e984*=0x6a6, lpOverlapped=0x0) returned 1 [0031.587] CloseHandle (hObject=0x2a4) returned 1 [0031.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", lpFilePart=0x0) returned 0x3c [0031.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.588] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oojiqe2ti5vbxcbhng2.docx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.588] GetFileType (hFile=0x2a4) returned 0x1 [0031.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.588] GetFileType (hFile=0x2a4) returned 0x1 [0031.588] WriteFile (in: hFile=0x2a4, lpBuffer=0x2059e74*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x2059e74*, lpNumberOfBytesWritten=0x33e948*=0x6b0, lpOverlapped=0x0) returned 1 [0031.589] CloseHandle (hObject=0x2a4) returned 1 [0031.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70285c33, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70285c33, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70285c33, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70285c33, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.590] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.590] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc798 [0031.590] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.590] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.590] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc2d8 [0031.590] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.590] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.590] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.590] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.590] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.590] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.590] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.590] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.590] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.590] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.590] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.590] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.590] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.590] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.591] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.591] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", lpFilePart=0x0) returned 0x37 [0031.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", lpFilePart=0x0) returned 0x37 [0031.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", lpFilePart=0x0) returned 0x37 [0031.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", lpFilePart=0x0) returned 0x37 [0031.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oojiqe2ti5vbxcbhng2.docx"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4799620, ftCreationTime.dwHighDateTime=0x1d32edd, ftLastAccessTime.dwLowDateTime=0xa2555b60, ftLastAccessTime.dwHighDateTime=0x1d37241, ftLastWriteTime.dwLowDateTime=0xa2555b60, ftLastWriteTime.dwHighDateTime=0x1d37241, nFileSizeHigh=0x0, nFileSizeLow=0x6a6)) returned 1 [0031.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", lpFilePart=0x0) returned 0x37 [0031.591] GetFullPathNameW (in: lpFileName="oOjIQe2Ti5VBxCBHnG2.docx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\oOjIQe2Ti5VBxCBHnG2.docx", lpFilePart=0x0) returned 0x35 [0031.591] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc2d8 [0031.592] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.592] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", lpFilePart=0x0) returned 0x37 [0031.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", lpFilePart=0x0) returned 0x37 [0031.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", lpFilePart=0x0) returned 0x37 [0031.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oojiqe2ti5vbxcbhng2.docx"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4799620, ftCreationTime.dwHighDateTime=0x1d32edd, ftLastAccessTime.dwLowDateTime=0xa2555b60, ftLastAccessTime.dwHighDateTime=0x1d37241, ftLastWriteTime.dwLowDateTime=0xa2555b60, ftLastWriteTime.dwHighDateTime=0x1d37241, nFileSizeHigh=0x0, nFileSizeLow=0x6a6)) returned 1 [0031.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", lpFilePart=0x0) returned 0x37 [0031.592] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oojiqe2ti5vbxcbhng2.docx")) returned 1 [0031.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70285c33, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70285c33, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70285c33, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70285c33, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.593] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.593] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc318 [0031.593] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.593] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0031.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.593] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc558 [0031.594] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.594] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.594] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.594] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.594] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.594] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.594] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.594] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.594] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.594] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.594] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", lpFilePart=0x0) returned 0x39 [0031.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\sbSKABnlrTuf_M3v.pps.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\sbSKABnlrTuf_M3v.pps.Lime", lpFilePart=0x0) returned 0x38 [0031.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0031.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0031.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0031.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0031.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0031.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0031.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0031.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0031.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0031.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", lpFilePart=0x0) returned 0x32 [0031.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0031.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0031.621] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0031.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.622] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc358 [0031.624] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", lpFilePart=0x0) returned 0x2f [0031.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", lpFilePart=0x0) returned 0x2f [0031.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", lpFilePart=0x0) returned 0x2f [0031.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", lpFilePart=0x0) returned 0x2f [0031.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\wvqxspnlmsl.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45a92bc0, ftCreationTime.dwHighDateTime=0x1d38caa, ftLastAccessTime.dwLowDateTime=0xc4599560, ftLastAccessTime.dwHighDateTime=0x1d341f3, ftLastWriteTime.dwLowDateTime=0xc4599560, ftLastWriteTime.dwHighDateTime=0x1d341f3, nFileSizeHigh=0x0, nFileSizeLow=0x16126)) returned 1 [0031.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", lpFilePart=0x0) returned 0x2f [0031.625] GetFullPathNameW (in: lpFileName="wvqxSPNlMSl.xlsx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\wvqxSPNlMSl.xlsx", lpFilePart=0x0) returned 0x2d [0031.625] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc2d8 [0031.625] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", lpFilePart=0x0) returned 0x2f [0031.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", lpFilePart=0x0) returned 0x2f [0031.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", lpFilePart=0x0) returned 0x2f [0031.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\wvqxspnlmsl.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45a92bc0, ftCreationTime.dwHighDateTime=0x1d38caa, ftLastAccessTime.dwLowDateTime=0xc4599560, ftLastAccessTime.dwHighDateTime=0x1d341f3, ftLastWriteTime.dwLowDateTime=0xc4599560, ftLastWriteTime.dwHighDateTime=0x1d341f3, nFileSizeHigh=0x0, nFileSizeLow=0x16126)) returned 1 [0031.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", lpFilePart=0x0) returned 0x2f [0031.625] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\wvqxspnlmsl.xlsx")) returned 1 [0031.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702d20eb, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702d20eb, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702d20eb, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702d20eb, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.627] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.627] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc7d8 [0031.627] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.627] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc4d8 [0031.630] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0031.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702d20eb, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702d20eb, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702d20eb, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702d20eb, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.631] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.631] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc658 [0031.631] FindClose (in: hFindFile=0x4dc658 | out: hFindFile=0x4dc658) returned 1 [0031.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.631] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc8d8 [0031.634] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0031.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", lpFilePart=0x0) returned 0x2e [0031.634] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\x7nab3sx5u.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.635] GetFileType (hFile=0x2a4) returned 0x1 [0031.635] GetFileType (hFile=0x2a4) returned 0x1 [0031.635] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x178ba [0031.635] ReadFile (in: hFile=0x2a4, lpBuffer=0x31b6588, nNumberOfBytesToRead=0x178ba, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x31b6588*, lpNumberOfBytesRead=0x33e984*=0x178ba, lpOverlapped=0x0) returned 1 [0031.635] CloseHandle (hObject=0x2a4) returned 1 [0031.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", lpFilePart=0x0) returned 0x33 [0031.638] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\x7nab3sx5u.pptx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.638] GetFileType (hFile=0x2a4) returned 0x1 [0031.638] GetFileType (hFile=0x2a4) returned 0x1 [0031.638] WriteFile (in: hFile=0x2a4, lpBuffer=0x31cde60*, nNumberOfBytesToWrite=0x178c0, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x31cde60*, lpNumberOfBytesWritten=0x33e974*=0x178c0, lpOverlapped=0x0) returned 1 [0031.639] CloseHandle (hObject=0x2a4) returned 1 [0031.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.642] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.642] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc6d8 [0031.642] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.642] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0031.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.642] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc418 [0031.642] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.642] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.642] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.642] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.642] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.644] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.644] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0031.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", lpFilePart=0x0) returned 0x2e [0031.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", lpFilePart=0x0) returned 0x2e [0031.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", lpFilePart=0x0) returned 0x2e [0031.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", lpFilePart=0x0) returned 0x2e [0031.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\x7nab3sx5u.pptx"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf58cbe0, ftCreationTime.dwHighDateTime=0x1d381cc, ftLastAccessTime.dwLowDateTime=0x3825a440, ftLastAccessTime.dwHighDateTime=0x1d3565b, ftLastWriteTime.dwLowDateTime=0x3825a440, ftLastWriteTime.dwHighDateTime=0x1d3565b, nFileSizeHigh=0x0, nFileSizeLow=0x178ba)) returned 1 [0031.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", lpFilePart=0x0) returned 0x2e [0031.645] GetFullPathNameW (in: lpFileName="x7naB3SX5u.pptx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\x7naB3SX5u.pptx", lpFilePart=0x0) returned 0x2c [0031.645] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc8d8 [0031.645] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0031.645] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0031.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", lpFilePart=0x0) returned 0x2e [0031.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", lpFilePart=0x0) returned 0x2e [0031.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", lpFilePart=0x0) returned 0x2e [0031.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\x7nab3sx5u.pptx"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf58cbe0, ftCreationTime.dwHighDateTime=0x1d381cc, ftLastAccessTime.dwLowDateTime=0x3825a440, ftLastAccessTime.dwHighDateTime=0x1d3565b, ftLastWriteTime.dwLowDateTime=0x3825a440, ftLastWriteTime.dwHighDateTime=0x1d3565b, nFileSizeHigh=0x0, nFileSizeLow=0x178ba)) returned 1 [0031.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", lpFilePart=0x0) returned 0x2e [0031.645] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\x7nab3sx5u.pptx")) returned 1 [0031.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.647] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.647] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc8d8 [0031.647] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.647] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0031.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.647] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc2d8 [0031.647] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.647] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.647] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.647] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.647] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.647] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.647] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.647] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.647] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.647] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.647] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.647] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.647] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.647] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.648] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.648] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.649] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.649] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc6d8 [0031.649] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.649] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0031.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.649] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc558 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.649] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.650] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.650] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.650] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.650] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.650] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.650] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.650] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.650] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.650] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.650] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.650] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.650] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.650] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0031.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0xc3bf0060, ftLastAccessTime.dwHighDateTime=0x1d351c8, ftLastWriteTime.dwLowDateTime=0xc3bf0060, ftLastWriteTime.dwHighDateTime=0x1d351c8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0xc3bf0060, ftLastAccessTime.dwHighDateTime=0x1d351c8, ftLastWriteTime.dwLowDateTime=0xc3bf0060, ftLastWriteTime.dwHighDateTime=0x1d351c8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.650] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0031.650] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc598 [0031.650] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.651] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0031.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0031.651] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc2d8 [0031.651] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.651] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.651] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.651] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.651] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.651] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.651] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.651] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.651] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.651] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.651] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.651] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0xc3bf0060, ftLastAccessTime.dwHighDateTime=0x1d351c8, ftLastWriteTime.dwLowDateTime=0xc3bf0060, ftLastWriteTime.dwHighDateTime=0x1d351c8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0xc3bf0060, ftLastAccessTime.dwHighDateTime=0x1d351c8, ftLastWriteTime.dwLowDateTime=0xc3bf0060, ftLastWriteTime.dwHighDateTime=0x1d351c8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.652] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0031.652] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc2d8 [0031.652] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.652] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0031.652] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc6d8 [0031.652] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.652] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.652] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.652] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.652] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.652] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.652] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.652] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.652] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.652] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.652] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.652] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0031.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0031.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0031.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0031.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0031.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.660] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.660] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc6d8 [0031.661] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.661] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.661] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.661] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.661] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.661] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.661] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.661] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.661] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.661] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.661] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.661] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.662] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0031.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0031.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\0r-uDW4THkIUpl-oRh_.odt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\0r-udw4thkiupl-orh_.odt"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd977b0, ftCreationTime.dwHighDateTime=0x1d34f47, ftLastAccessTime.dwLowDateTime=0x4b89e400, ftLastAccessTime.dwHighDateTime=0x1d354b8, ftLastWriteTime.dwLowDateTime=0x4b89e400, ftLastWriteTime.dwHighDateTime=0x1d354b8, nFileSizeHigh=0x0, nFileSizeLow=0x17b9c)) returned 1 [0031.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0031.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0031.662] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\0r-uDW4THkIUpl-oRh_.odt", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc2d8 [0031.662] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0031.662] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0031.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0031.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0031.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\0r-uDW4THkIUpl-oRh_.odt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\0r-udw4thkiupl-orh_.odt"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd977b0, ftCreationTime.dwHighDateTime=0x1d34f47, ftLastAccessTime.dwLowDateTime=0x4b89e400, ftLastAccessTime.dwHighDateTime=0x1d354b8, ftLastWriteTime.dwLowDateTime=0x4b89e400, ftLastWriteTime.dwHighDateTime=0x1d354b8, nFileSizeHigh=0x0, nFileSizeLow=0x17b9c)) returned 1 [0031.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0031.663] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\0r-uDW4THkIUpl-oRh_.odt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\0r-udw4thkiupl-orh_.odt")) returned 1 [0031.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70344b3a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70344b3a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70344b3a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70344b3a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.664] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc8d8 [0031.665] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.665] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0031.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.665] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc6d8 [0031.665] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.665] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.665] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.665] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.665] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.665] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.665] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.665] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.666] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.666] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.666] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.666] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0031.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70344b3a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70344b3a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70344b3a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70344b3a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.666] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc7d8 [0031.667] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.667] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.667] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc7d8 [0031.667] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.667] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.667] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.667] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.667] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.667] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.667] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.668] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.668] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.668] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.668] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.668] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0031.668] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\b37k-lfrwivyw.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.668] GetFileType (hFile=0x2a4) returned 0x1 [0031.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0031.668] GetFileType (hFile=0x2a4) returned 0x1 [0031.668] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x66e8 [0031.668] ReadFile (in: hFile=0x2a4, lpBuffer=0x2150458, nNumberOfBytesToRead=0x66e8, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x2150458*, lpNumberOfBytesRead=0x33e948*=0x66e8, lpOverlapped=0x0) returned 1 [0031.669] CloseHandle (hObject=0x2a4) returned 1 [0031.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0031.670] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\b37k-lfrwivyw.pps.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.670] GetFileType (hFile=0x2a4) returned 0x1 [0031.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0031.670] GetFileType (hFile=0x2a4) returned 0x1 [0031.670] WriteFile (in: hFile=0x2a4, lpBuffer=0x2157114*, nNumberOfBytesToWrite=0x66f0, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x2157114*, lpNumberOfBytesWritten=0x33e938*=0x66f0, lpOverlapped=0x0) returned 1 [0031.670] CloseHandle (hObject=0x2a4) returned 1 [0031.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70344b3a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70344b3a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70344b3a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70344b3a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.672] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc458 [0031.672] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.672] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0031.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.672] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc418 [0031.672] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.672] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.673] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.673] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.673] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.673] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.673] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.673] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.673] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.673] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.673] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.673] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.673] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0031.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0031.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\b37k-lfrwivyw.pps"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e020c20, ftCreationTime.dwHighDateTime=0x1d34d41, ftLastAccessTime.dwLowDateTime=0xee3265c0, ftLastAccessTime.dwHighDateTime=0x1d356a1, ftLastWriteTime.dwLowDateTime=0xee3265c0, ftLastWriteTime.dwHighDateTime=0x1d356a1, nFileSizeHigh=0x0, nFileSizeLow=0x66e8)) returned 1 [0031.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0031.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0031.674] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc7d8 [0031.674] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0031.674] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0031.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0031.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0031.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\b37k-lfrwivyw.pps"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e020c20, ftCreationTime.dwHighDateTime=0x1d34d41, ftLastAccessTime.dwLowDateTime=0xee3265c0, ftLastAccessTime.dwHighDateTime=0x1d356a1, ftLastWriteTime.dwLowDateTime=0xee3265c0, ftLastWriteTime.dwHighDateTime=0x1d356a1, nFileSizeHigh=0x0, nFileSizeLow=0x66e8)) returned 1 [0031.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0031.674] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\b37k-lfrwivyw.pps")) returned 1 [0031.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70344b3a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70344b3a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70344b3a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70344b3a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.676] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc3d8 [0031.676] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.676] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.676] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc6d8 [0031.676] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.676] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.676] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.676] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.677] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.677] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.677] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.677] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.677] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.677] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.677] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.677] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0031.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70344b3a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70344b3a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70344b3a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70344b3a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.678] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc918 [0031.678] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.678] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0031.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.678] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc2d8 [0031.678] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.678] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.678] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.678] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.678] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.679] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.679] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.679] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.679] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.679] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.679] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.679] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0031.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0031.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0031.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0031.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.681] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc318 [0031.681] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.681] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0031.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.681] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc318 [0031.681] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.681] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.682] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.682] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.682] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.682] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.682] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.682] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.682] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.682] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.682] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.682] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.682] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0031.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0031.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0031.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0031.683] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc318 [0031.683] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0031.683] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0031.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0031.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0031.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0031.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0031.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.684] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc318 [0031.684] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.684] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0031.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.685] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc3d8 [0031.685] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.685] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.685] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.685] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.685] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.685] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.685] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.685] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.685] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.685] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.686] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.686] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.686] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc598 [0031.686] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.686] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0031.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.686] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc518 [0031.686] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.686] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.687] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.687] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.687] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.687] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.687] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.687] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.687] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.687] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.687] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0031.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0031.687] CloseHandle (hObject=0x2a4) returned 1 [0031.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", lpFilePart=0x0) returned 0x3a [0031.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0031.688] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\miqzp.pps.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.688] GetFileType (hFile=0x2a4) returned 0x1 [0031.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0031.688] GetFileType (hFile=0x2a4) returned 0x1 [0031.688] WriteFile (in: hFile=0x2a4, lpBuffer=0x217cf08*, nNumberOfBytesToWrite=0x890, lpNumberOfBytesWritten=0x33e90c, lpOverlapped=0x0 | out: lpBuffer=0x217cf08*, lpNumberOfBytesWritten=0x33e90c*=0x890, lpOverlapped=0x0) returned 1 [0031.689] CloseHandle (hObject=0x2a4) returned 1 [0031.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x7036aafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7036aafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x7036aafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7036aafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.690] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0031.690] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc3d8 [0031.690] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.690] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0031.690] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc318 [0031.690] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.690] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.690] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.690] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.691] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.691] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.691] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.691] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.691] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.691] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0031.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0031.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0031.692] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc318 [0031.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0031.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0031.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0031.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0031.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.695] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc318 [0031.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.695] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc3d8 [0031.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.696] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc3d8 [0031.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.696] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc3d8 [0031.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0031.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0031.699] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", lpFilePart=0x0) returned 0x41 [0031.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0031.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0031.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0031.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0031.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", lpFilePart=0x0) returned 0x44 [0031.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Y0TrwFscQKo7rDx.rtf.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Y0TrwFscQKo7rDx.rtf.Lime", lpFilePart=0x0) returned 0x44 [0031.710] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc418 [0031.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\4b 60gQKE2-RBiqkF4.odt.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\4b 60gQKE2-RBiqkF4.odt.Lime", lpFilePart=0x0) returned 0x51 [0031.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx.Lime", lpFilePart=0x0) returned 0x4b [0031.718] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\dupiwyyc2jp.docx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.718] GetFileType (hFile=0x2a4) returned 0x1 [0031.718] GetFileType (hFile=0x2a4) returned 0x1 [0031.718] WriteFile (in: hFile=0x2a4, lpBuffer=0x2221764*, nNumberOfBytesToWrite=0xe430, lpNumberOfBytesWritten=0x33e8fc, lpOverlapped=0x0 | out: lpBuffer=0x2221764*, lpNumberOfBytesWritten=0x33e8fc*=0xe430, lpOverlapped=0x0) returned 1 [0031.719] CloseHandle (hObject=0x2a4) returned 1 [0031.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x703b6f20, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x703b6f20, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x703b6f20, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x703b6f20, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.721] GetFullPathNameW (in: lpFileName="AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AO-nFf kn", lpFilePart=0x0) returned 0x26 [0031.721] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc7d8 [0031.721] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", lpFilePart=0x0) returned 0x36 [0031.721] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc7d8 [0031.724] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.724] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.724] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.724] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.724] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.724] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.724] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.724] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.724] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.724] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.724] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", lpFilePart=0x0) returned 0x46 [0031.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", lpFilePart=0x0) returned 0x46 [0031.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", nBufferLength=0x105, lpBuffer=0x33e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", lpFilePart=0x0) returned 0x46 [0031.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", lpFilePart=0x0) returned 0x46 [0031.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e888) returned 1 [0031.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\dupiwyyc2jp.docx"), fInfoLevelId=0x0, lpFileInformation=0x33e904 | out: lpFileInformation=0x33e904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b39bc10, ftCreationTime.dwHighDateTime=0x1d359f8, ftLastAccessTime.dwLowDateTime=0x65299d80, ftLastAccessTime.dwHighDateTime=0x1d354bb, ftLastWriteTime.dwLowDateTime=0x65299d80, ftLastWriteTime.dwHighDateTime=0x1d354bb, nFileSizeHigh=0x0, nFileSizeLow=0xe427)) returned 1 [0031.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e884) returned 1 [0031.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8ec) returned 1 [0031.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", lpFilePart=0x0) returned 0x46 [0031.725] GetFullPathNameW (in: lpFileName="dupIwyYc2Jp.docx", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\dupIwyYc2Jp.docx", lpFilePart=0x0) returned 0x2d [0031.725] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", lpFindFileData=0x33e614 | out: lpFindFileData=0x33e614) returned 0x4dc318 [0031.725] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e624 | out: lpFindFileData=0x33e624) returned 0 [0031.725] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0031.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8ac) returned 1 [0031.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", nBufferLength=0x105, lpBuffer=0x33e39c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", lpFilePart=0x0) returned 0x46 [0031.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", lpFilePart=0x0) returned 0x46 [0031.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", nBufferLength=0x105, lpBuffer=0x33e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", lpFilePart=0x0) returned 0x46 [0031.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c0) returned 1 [0031.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\dupiwyyc2jp.docx"), fInfoLevelId=0x0, lpFileInformation=0x33e93c | out: lpFileInformation=0x33e93c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b39bc10, ftCreationTime.dwHighDateTime=0x1d359f8, ftLastAccessTime.dwLowDateTime=0x65299d80, ftLastAccessTime.dwHighDateTime=0x1d354bb, ftLastWriteTime.dwLowDateTime=0x65299d80, ftLastWriteTime.dwHighDateTime=0x1d354bb, nFileSizeHigh=0x0, nFileSizeLow=0xe427)) returned 1 [0031.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8bc) returned 1 [0031.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx", lpFilePart=0x0) returned 0x46 [0031.726] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\dupIwyYc2Jp.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\dupiwyyc2jp.docx")) returned 1 [0031.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x703dd171, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x703dd171, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x703dd171, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x703dd171, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.727] GetFullPathNameW (in: lpFileName="AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AO-nFf kn", lpFilePart=0x0) returned 0x26 [0031.727] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc598 [0031.727] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.727] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0031.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", lpFilePart=0x0) returned 0x36 [0031.727] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc658 [0031.728] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.728] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.728] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.728] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.728] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.728] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.728] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.728] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.728] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.728] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.728] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.728] FindClose (in: hFindFile=0x4dc658 | out: hFindFile=0x4dc658) returned 1 [0031.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x703dd171, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x703dd171, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x703dd171, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x703dd171, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.729] GetFullPathNameW (in: lpFileName="AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AO-nFf kn", lpFilePart=0x0) returned 0x26 [0031.729] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc498 [0031.729] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.729] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0031.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", lpFilePart=0x0) returned 0x36 [0031.730] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc598 [0031.730] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.730] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.730] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.730] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.730] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.730] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.730] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.730] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.730] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.730] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.730] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.731] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0031.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", nBufferLength=0x105, lpBuffer=0x33e348, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", lpFilePart=0x0) returned 0x3f [0031.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e85c) returned 1 [0031.731] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\gtn-k.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.731] GetFileType (hFile=0x2a4) returned 0x1 [0031.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.731] GetFileType (hFile=0x2a4) returned 0x1 [0031.731] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e960 | out: lpFileSizeHigh=0x33e960*=0x0) returned 0x1422c [0031.731] ReadFile (in: hFile=0x2a4, lpBuffer=0x203ec58, nNumberOfBytesToRead=0x1422c, lpNumberOfBytesRead=0x33e90c, lpOverlapped=0x0 | out: lpBuffer=0x203ec58*, lpNumberOfBytesRead=0x33e90c*=0x1422c, lpOverlapped=0x0) returned 1 [0031.731] CloseHandle (hObject=0x2a4) returned 1 [0031.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt.Lime", lpFilePart=0x0) returned 0x44 [0031.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e844) returned 1 [0031.733] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\gtn-k.odt.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.734] GetFileType (hFile=0x2a4) returned 0x1 [0031.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e840) returned 1 [0031.734] GetFileType (hFile=0x2a4) returned 0x1 [0031.734] WriteFile (in: hFile=0x2a4, lpBuffer=0x2053458*, nNumberOfBytesToWrite=0x14230, lpNumberOfBytesWritten=0x33e8fc, lpOverlapped=0x0 | out: lpBuffer=0x2053458*, lpNumberOfBytesWritten=0x33e8fc*=0x14230, lpOverlapped=0x0) returned 1 [0031.735] CloseHandle (hObject=0x2a4) returned 1 [0031.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x703dd171, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x703dd171, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x703dd171, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x703dd171, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.737] GetFullPathNameW (in: lpFileName="AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AO-nFf kn", lpFilePart=0x0) returned 0x26 [0031.737] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc798 [0031.737] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.737] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", lpFilePart=0x0) returned 0x36 [0031.737] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc418 [0031.737] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.737] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.737] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.737] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.738] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.738] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.738] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.738] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.738] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.738] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.738] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.738] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.738] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0031.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", lpFilePart=0x0) returned 0x3f [0031.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", lpFilePart=0x0) returned 0x3f [0031.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", nBufferLength=0x105, lpBuffer=0x33e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", lpFilePart=0x0) returned 0x3f [0031.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", lpFilePart=0x0) returned 0x3f [0031.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e888) returned 1 [0031.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\gtn-k.odt"), fInfoLevelId=0x0, lpFileInformation=0x33e904 | out: lpFileInformation=0x33e904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad2170, ftCreationTime.dwHighDateTime=0x1d3538c, ftLastAccessTime.dwLowDateTime=0xb88038b0, ftLastAccessTime.dwHighDateTime=0x1d356d5, ftLastWriteTime.dwLowDateTime=0xb88038b0, ftLastWriteTime.dwHighDateTime=0x1d356d5, nFileSizeHigh=0x0, nFileSizeLow=0x1422c)) returned 1 [0031.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e884) returned 1 [0031.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8ec) returned 1 [0031.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", lpFilePart=0x0) returned 0x3f [0031.739] GetFullPathNameW (in: lpFileName="gTN-k.odt", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\gTN-k.odt", lpFilePart=0x0) returned 0x26 [0031.739] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", lpFindFileData=0x33e614 | out: lpFindFileData=0x33e614) returned 0x4dc358 [0031.739] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e624 | out: lpFindFileData=0x33e624) returned 0 [0031.739] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8ac) returned 1 [0031.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", nBufferLength=0x105, lpBuffer=0x33e39c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", lpFilePart=0x0) returned 0x3f [0031.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", lpFilePart=0x0) returned 0x3f [0031.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", nBufferLength=0x105, lpBuffer=0x33e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", lpFilePart=0x0) returned 0x3f [0031.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c0) returned 1 [0031.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\gtn-k.odt"), fInfoLevelId=0x0, lpFileInformation=0x33e93c | out: lpFileInformation=0x33e93c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad2170, ftCreationTime.dwHighDateTime=0x1d3538c, ftLastAccessTime.dwLowDateTime=0xb88038b0, ftLastAccessTime.dwHighDateTime=0x1d356d5, ftLastWriteTime.dwLowDateTime=0xb88038b0, ftLastWriteTime.dwHighDateTime=0x1d356d5, nFileSizeHigh=0x0, nFileSizeLow=0x1422c)) returned 1 [0031.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8bc) returned 1 [0031.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt", lpFilePart=0x0) returned 0x3f [0031.739] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\gTN-k.odt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\gtn-k.odt")) returned 1 [0031.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x703dd171, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x703dd171, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x703dd171, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x703dd171, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.741] GetFullPathNameW (in: lpFileName="AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AO-nFf kn", lpFilePart=0x0) returned 0x26 [0031.741] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc658 [0031.741] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.741] FindClose (in: hFindFile=0x4dc658 | out: hFindFile=0x4dc658) returned 1 [0031.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", lpFilePart=0x0) returned 0x36 [0031.741] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc298 [0031.741] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.741] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.742] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.742] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.742] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.742] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.742] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.742] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.742] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.742] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.742] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.742] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0031.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x703dd171, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x703dd171, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x703dd171, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x703dd171, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.743] GetFullPathNameW (in: lpFileName="AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AO-nFf kn", lpFilePart=0x0) returned 0x26 [0031.743] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc798 [0031.743] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.743] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", lpFilePart=0x0) returned 0x36 [0031.743] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc618 [0031.743] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.743] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.743] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.744] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.744] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.744] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.744] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.744] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.744] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.744] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.744] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.744] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0031.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", nBufferLength=0x105, lpBuffer=0x33e348, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", lpFilePart=0x0) returned 0x47 [0031.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e85c) returned 1 [0031.744] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\mt8ryidfz3cr.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.744] GetFileType (hFile=0x2a4) returned 0x1 [0031.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.744] GetFileType (hFile=0x2a4) returned 0x1 [0031.744] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e960 | out: lpFileSizeHigh=0x33e960*=0x0) returned 0xdc5a [0031.744] ReadFile (in: hFile=0x2a4, lpBuffer=0x207564c, nNumberOfBytesToRead=0xdc5a, lpNumberOfBytesRead=0x33e90c, lpOverlapped=0x0 | out: lpBuffer=0x207564c*, lpNumberOfBytesRead=0x33e90c*=0xdc5a, lpOverlapped=0x0) returned 1 [0031.745] CloseHandle (hObject=0x2a4) returned 1 [0031.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx.Lime", lpFilePart=0x0) returned 0x4c [0031.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e844) returned 1 [0031.746] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\mt8ryidfz3cr.pptx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.746] GetFileType (hFile=0x2a4) returned 0x1 [0031.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e840) returned 1 [0031.746] GetFileType (hFile=0x2a4) returned 0x1 [0031.746] WriteFile (in: hFile=0x2a4, lpBuffer=0x2083890*, nNumberOfBytesToWrite=0xdc60, lpNumberOfBytesWritten=0x33e8fc, lpOverlapped=0x0 | out: lpBuffer=0x2083890*, lpNumberOfBytesWritten=0x33e8fc*=0xdc60, lpOverlapped=0x0) returned 1 [0031.747] CloseHandle (hObject=0x2a4) returned 1 [0031.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x704033f4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704033f4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x704033f4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704033f4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.749] GetFullPathNameW (in: lpFileName="AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AO-nFf kn", lpFilePart=0x0) returned 0x26 [0031.749] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc618 [0031.749] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.749] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0031.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", lpFilePart=0x0) returned 0x36 [0031.749] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc318 [0031.749] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.750] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.750] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.750] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.750] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.750] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.750] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.750] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.750] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.750] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.750] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.750] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.750] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0031.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", lpFilePart=0x0) returned 0x47 [0031.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", lpFilePart=0x0) returned 0x47 [0031.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", nBufferLength=0x105, lpBuffer=0x33e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", lpFilePart=0x0) returned 0x47 [0031.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", lpFilePart=0x0) returned 0x47 [0031.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e888) returned 1 [0031.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\mt8ryidfz3cr.pptx"), fInfoLevelId=0x0, lpFileInformation=0x33e904 | out: lpFileInformation=0x33e904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf87fe730, ftCreationTime.dwHighDateTime=0x1d34ff5, ftLastAccessTime.dwLowDateTime=0xa1a6b9c0, ftLastAccessTime.dwHighDateTime=0x1d354d2, ftLastWriteTime.dwLowDateTime=0xa1a6b9c0, ftLastWriteTime.dwHighDateTime=0x1d354d2, nFileSizeHigh=0x0, nFileSizeLow=0xdc5a)) returned 1 [0031.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e884) returned 1 [0031.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8ec) returned 1 [0031.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", lpFilePart=0x0) returned 0x47 [0031.751] GetFullPathNameW (in: lpFileName="mT8RyiDfz3cr.pptx", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mT8RyiDfz3cr.pptx", lpFilePart=0x0) returned 0x2e [0031.751] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", lpFindFileData=0x33e614 | out: lpFindFileData=0x33e614) returned 0x4dc898 [0031.751] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e624 | out: lpFindFileData=0x33e624) returned 0 [0031.751] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0031.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8ac) returned 1 [0031.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", nBufferLength=0x105, lpBuffer=0x33e39c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", lpFilePart=0x0) returned 0x47 [0031.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", lpFilePart=0x0) returned 0x47 [0031.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", nBufferLength=0x105, lpBuffer=0x33e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", lpFilePart=0x0) returned 0x47 [0031.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c0) returned 1 [0031.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\mt8ryidfz3cr.pptx"), fInfoLevelId=0x0, lpFileInformation=0x33e93c | out: lpFileInformation=0x33e93c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf87fe730, ftCreationTime.dwHighDateTime=0x1d34ff5, ftLastAccessTime.dwLowDateTime=0xa1a6b9c0, ftLastAccessTime.dwHighDateTime=0x1d354d2, ftLastWriteTime.dwLowDateTime=0xa1a6b9c0, ftLastWriteTime.dwHighDateTime=0x1d354d2, nFileSizeHigh=0x0, nFileSizeLow=0xdc5a)) returned 1 [0031.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8bc) returned 1 [0031.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx", lpFilePart=0x0) returned 0x47 [0031.751] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\mT8RyiDfz3cr.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\mt8ryidfz3cr.pptx")) returned 1 [0031.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x704033f4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704033f4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x704033f4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704033f4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.753] GetFullPathNameW (in: lpFileName="AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AO-nFf kn", lpFilePart=0x0) returned 0x26 [0031.753] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc7d8 [0031.753] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.753] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", lpFilePart=0x0) returned 0x36 [0031.754] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc298 [0031.754] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.754] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.754] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.754] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.754] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.754] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.754] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.754] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.754] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.754] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.754] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.754] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0031.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x704033f4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704033f4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x704033f4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704033f4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.755] GetFullPathNameW (in: lpFileName="AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AO-nFf kn", lpFilePart=0x0) returned 0x26 [0031.755] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc4d8 [0031.755] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.755] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0031.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", lpFilePart=0x0) returned 0x36 [0031.756] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc1d8 [0031.756] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.756] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.756] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.756] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.756] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.756] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.756] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.756] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.756] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.756] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.756] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.756] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", nBufferLength=0x105, lpBuffer=0x33e348, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", lpFilePart=0x0) returned 0x4b [0031.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e85c) returned 1 [0031.756] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\nadn7qwb885nzat o.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.756] GetFileType (hFile=0x2a4) returned 0x1 [0031.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.756] GetFileType (hFile=0x2a4) returned 0x1 [0031.756] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e960 | out: lpFileSizeHigh=0x33e960*=0x0) returned 0x15846 [0031.757] ReadFile (in: hFile=0x2a4, lpBuffer=0x323f1d0, nNumberOfBytesToRead=0x15846, lpNumberOfBytesRead=0x33e90c, lpOverlapped=0x0 | out: lpBuffer=0x323f1d0*, lpNumberOfBytesRead=0x33e90c*=0x15846, lpOverlapped=0x0) returned 1 [0031.757] CloseHandle (hObject=0x2a4) returned 1 [0031.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp.Lime", lpFilePart=0x0) returned 0x50 [0031.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e844) returned 1 [0031.760] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\nadn7qwb885nzat o.odp.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.760] GetFileType (hFile=0x2a4) returned 0x1 [0031.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e840) returned 1 [0031.760] GetFileType (hFile=0x2a4) returned 0x1 [0031.760] WriteFile (in: hFile=0x2a4, lpBuffer=0x3254a38*, nNumberOfBytesToWrite=0x15850, lpNumberOfBytesWritten=0x33e8fc, lpOverlapped=0x0 | out: lpBuffer=0x3254a38*, lpNumberOfBytesWritten=0x33e8fc*=0x15850, lpOverlapped=0x0) returned 1 [0031.761] CloseHandle (hObject=0x2a4) returned 1 [0031.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x70429628, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70429628, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x70429628, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70429628, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.763] GetFullPathNameW (in: lpFileName="AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AO-nFf kn", lpFilePart=0x0) returned 0x26 [0031.763] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc298 [0031.763] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.763] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0031.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", lpFilePart=0x0) returned 0x36 [0031.763] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc498 [0031.763] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.764] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.764] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.764] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.764] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.764] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.764] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.764] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.764] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.764] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.764] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.764] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.764] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0031.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", lpFilePart=0x0) returned 0x4b [0031.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", lpFilePart=0x0) returned 0x4b [0031.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", nBufferLength=0x105, lpBuffer=0x33e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", lpFilePart=0x0) returned 0x4b [0031.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", lpFilePart=0x0) returned 0x4b [0031.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e888) returned 1 [0031.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\nadn7qwb885nzat o.odp"), fInfoLevelId=0x0, lpFileInformation=0x33e904 | out: lpFileInformation=0x33e904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20c09150, ftCreationTime.dwHighDateTime=0x1d34cbc, ftLastAccessTime.dwLowDateTime=0xde0ba950, ftLastAccessTime.dwHighDateTime=0x1d35358, ftLastWriteTime.dwLowDateTime=0xde0ba950, ftLastWriteTime.dwHighDateTime=0x1d35358, nFileSizeHigh=0x0, nFileSizeLow=0x15846)) returned 1 [0031.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e884) returned 1 [0031.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8ec) returned 1 [0031.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", lpFilePart=0x0) returned 0x4b [0031.764] GetFullPathNameW (in: lpFileName="nAdn7QwB885NzAt O.odp", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\nAdn7QwB885NzAt O.odp", lpFilePart=0x0) returned 0x32 [0031.764] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", lpFindFileData=0x33e614 | out: lpFindFileData=0x33e614) returned 0x4dc318 [0031.764] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e624 | out: lpFindFileData=0x33e624) returned 0 [0031.764] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0031.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8ac) returned 1 [0031.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", nBufferLength=0x105, lpBuffer=0x33e39c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", lpFilePart=0x0) returned 0x4b [0031.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", lpFilePart=0x0) returned 0x4b [0031.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", nBufferLength=0x105, lpBuffer=0x33e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", lpFilePart=0x0) returned 0x4b [0031.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c0) returned 1 [0031.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\nadn7qwb885nzat o.odp"), fInfoLevelId=0x0, lpFileInformation=0x33e93c | out: lpFileInformation=0x33e93c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20c09150, ftCreationTime.dwHighDateTime=0x1d34cbc, ftLastAccessTime.dwLowDateTime=0xde0ba950, ftLastAccessTime.dwHighDateTime=0x1d35358, ftLastWriteTime.dwLowDateTime=0xde0ba950, ftLastWriteTime.dwHighDateTime=0x1d35358, nFileSizeHigh=0x0, nFileSizeLow=0x15846)) returned 1 [0031.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8bc) returned 1 [0031.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp", lpFilePart=0x0) returned 0x4b [0031.765] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nAdn7QwB885NzAt O.odp" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\nadn7qwb885nzat o.odp")) returned 1 [0031.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x70429628, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70429628, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x70429628, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70429628, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.767] GetFullPathNameW (in: lpFileName="AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AO-nFf kn", lpFilePart=0x0) returned 0x26 [0031.767] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc798 [0031.767] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.767] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", lpFilePart=0x0) returned 0x36 [0031.767] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc498 [0031.767] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.767] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.767] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.767] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.767] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.767] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.767] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.768] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.768] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.768] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.768] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.768] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0031.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x70429628, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70429628, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x70429628, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70429628, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.768] GetFullPathNameW (in: lpFileName="AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AO-nFf kn", lpFilePart=0x0) returned 0x26 [0031.768] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc1d8 [0031.768] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.768] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", lpFilePart=0x0) returned 0x36 [0031.769] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc298 [0031.769] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.769] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.769] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.769] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.769] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.769] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.769] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.769] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.769] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.769] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.769] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.769] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0031.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", nBufferLength=0x105, lpBuffer=0x33e348, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", lpFilePart=0x0) returned 0x3f [0031.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e85c) returned 1 [0031.769] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\nuvav.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.769] GetFileType (hFile=0x2a4) returned 0x1 [0031.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.769] GetFileType (hFile=0x2a4) returned 0x1 [0031.769] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e960 | out: lpFileSizeHigh=0x33e960*=0x0) returned 0xa559 [0031.769] ReadFile (in: hFile=0x2a4, lpBuffer=0x20ae0b0, nNumberOfBytesToRead=0xa559, lpNumberOfBytesRead=0x33e90c, lpOverlapped=0x0 | out: lpBuffer=0x20ae0b0*, lpNumberOfBytesRead=0x33e90c*=0xa559, lpOverlapped=0x0) returned 1 [0031.770] CloseHandle (hObject=0x2a4) returned 1 [0031.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf.Lime", lpFilePart=0x0) returned 0x44 [0031.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e844) returned 1 [0031.771] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\nuvav.rtf.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.771] GetFileType (hFile=0x2a4) returned 0x1 [0031.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e840) returned 1 [0031.771] GetFileType (hFile=0x2a4) returned 0x1 [0031.771] WriteFile (in: hFile=0x2a4, lpBuffer=0x20b8be4*, nNumberOfBytesToWrite=0xa560, lpNumberOfBytesWritten=0x33e8fc, lpOverlapped=0x0 | out: lpBuffer=0x20b8be4*, lpNumberOfBytesWritten=0x33e8fc*=0xa560, lpOverlapped=0x0) returned 1 [0031.772] CloseHandle (hObject=0x2a4) returned 1 [0031.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x70429628, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70429628, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf45ba30, ftCreationTime.dwHighDateTime=0x1d35950, ftLastAccessTime.dwLowDateTime=0x70429628, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70429628, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.773] GetFullPathNameW (in: lpFileName="AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AO-nFf kn", lpFilePart=0x0) returned 0x26 [0031.773] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc798 [0031.773] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.774] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\", lpFilePart=0x0) returned 0x36 [0031.774] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc418 [0031.774] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.774] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.774] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.774] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.774] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.774] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.774] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.774] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.774] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.774] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.774] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.774] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.774] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0031.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", lpFilePart=0x0) returned 0x3f [0031.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", lpFilePart=0x0) returned 0x3f [0031.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", nBufferLength=0x105, lpBuffer=0x33e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", lpFilePart=0x0) returned 0x3f [0031.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", lpFilePart=0x0) returned 0x3f [0031.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e888) returned 1 [0031.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\nuvav.rtf"), fInfoLevelId=0x0, lpFileInformation=0x33e904 | out: lpFileInformation=0x33e904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60dc9f0, ftCreationTime.dwHighDateTime=0x1d35029, ftLastAccessTime.dwLowDateTime=0x83dcd150, ftLastAccessTime.dwHighDateTime=0x1d34c39, ftLastWriteTime.dwLowDateTime=0x83dcd150, ftLastWriteTime.dwHighDateTime=0x1d34c39, nFileSizeHigh=0x0, nFileSizeLow=0xa559)) returned 1 [0031.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e884) returned 1 [0031.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8ec) returned 1 [0031.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", lpFilePart=0x0) returned 0x3f [0031.775] GetFullPathNameW (in: lpFileName="nuvaV.rtf", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\nuvaV.rtf", lpFilePart=0x0) returned 0x26 [0031.775] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", lpFindFileData=0x33e614 | out: lpFindFileData=0x33e614) returned 0x4dc418 [0031.775] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e624 | out: lpFindFileData=0x33e624) returned 0 [0031.775] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0031.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8ac) returned 1 [0031.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", nBufferLength=0x105, lpBuffer=0x33e39c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", lpFilePart=0x0) returned 0x3f [0031.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", lpFilePart=0x0) returned 0x3f [0031.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", nBufferLength=0x105, lpBuffer=0x33e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", lpFilePart=0x0) returned 0x3f [0031.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c0) returned 1 [0031.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\nuvav.rtf"), fInfoLevelId=0x0, lpFileInformation=0x33e93c | out: lpFileInformation=0x33e93c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60dc9f0, ftCreationTime.dwHighDateTime=0x1d35029, ftLastAccessTime.dwLowDateTime=0x83dcd150, ftLastAccessTime.dwHighDateTime=0x1d34c39, ftLastWriteTime.dwLowDateTime=0x83dcd150, ftLastWriteTime.dwHighDateTime=0x1d34c39, nFileSizeHigh=0x0, nFileSizeLow=0xa559)) returned 1 [0031.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8bc) returned 1 [0031.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf", lpFilePart=0x0) returned 0x3f [0031.775] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\nuvaV.rtf" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\nuvav.rtf")) returned 1 [0031.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn", lpFilePart=0x0) returned 0x35 [0031.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e85c) returned 1 [0031.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e844) returned 1 [0031.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e840) returned 1 [0031.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e888) returned 1 [0031.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e884) returned 1 [0031.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8ec) returned 1 [0031.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8ac) returned 1 [0031.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c0) returned 1 [0031.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8bc) returned 1 [0031.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e85c) returned 1 [0031.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e844) returned 1 [0031.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e840) returned 1 [0031.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e888) returned 1 [0031.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7e8) returned 1 [0031.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e864 | out: lpFileInformation=0x33e864*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x7049bd75, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7049bd75, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7e4) returned 1 [0031.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e858) returned 1 [0031.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.820] GetFullPathNameW (in: lpFileName="hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x29 [0031.820] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFindFileData=0x33e580 | out: lpFindFileData=0x33e580) returned 0x4dc798 [0031.821] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e590 | out: lpFindFileData=0x33e590) returned 0 [0031.821] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e818) returned 1 [0031.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e824) returned 1 [0031.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\.", nBufferLength=0x105, lpBuffer=0x33e308, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e88c) returned 1 [0031.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", lpFilePart=0x0) returned 0x56 [0031.821] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\*", lpFindFileData=0x33e5b4 | out: lpFindFileData=0x33e5b4) returned 0x4dc558 [0031.821] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.821] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.821] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.821] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.821] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.821] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.821] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.822] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 0 [0031.822] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0031.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e84c) returned 1 [0031.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", lpFilePart=0x0) returned 0x60 [0031.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", nBufferLength=0x105, lpBuffer=0x33e394, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", lpFilePart=0x0) returned 0x60 [0031.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", nBufferLength=0x105, lpBuffer=0x33e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", lpFilePart=0x0) returned 0x60 [0031.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e394, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", lpFilePart=0x0) returned 0x60 [0031.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e810) returned 1 [0031.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\pvdit6.pdf"), fInfoLevelId=0x0, lpFileInformation=0x33e88c | out: lpFileInformation=0x33e88c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96f1fa0, ftCreationTime.dwHighDateTime=0x1d35456, ftLastAccessTime.dwLowDateTime=0xba6c2540, ftLastAccessTime.dwHighDateTime=0x1d353d7, ftLastWriteTime.dwLowDateTime=0xba6c2540, ftLastWriteTime.dwHighDateTime=0x1d353d7, nFileSizeHigh=0x0, nFileSizeLow=0x9e06)) returned 1 [0031.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e80c) returned 1 [0031.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e874) returned 1 [0031.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e35c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", nBufferLength=0x105, lpBuffer=0x33e318, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", lpFilePart=0x0) returned 0x60 [0031.822] GetFullPathNameW (in: lpFileName="pvDIt6.pdf", nBufferLength=0x105, lpBuffer=0x33e318, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\pvDIt6.pdf", lpFilePart=0x0) returned 0x27 [0031.822] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", lpFindFileData=0x33e59c | out: lpFindFileData=0x33e59c) returned 0x4dc218 [0031.822] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e5ac | out: lpFindFileData=0x33e5ac) returned 0 [0031.822] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0031.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e834) returned 1 [0031.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e840) returned 1 [0031.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", nBufferLength=0x105, lpBuffer=0x33e324, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", lpFilePart=0x0) returned 0x60 [0031.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", lpFilePart=0x0) returned 0x60 [0031.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", nBufferLength=0x105, lpBuffer=0x33e3c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", lpFilePart=0x0) returned 0x60 [0031.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e848) returned 1 [0031.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\pvdit6.pdf"), fInfoLevelId=0x0, lpFileInformation=0x33e8c4 | out: lpFileInformation=0x33e8c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96f1fa0, ftCreationTime.dwHighDateTime=0x1d35456, ftLastAccessTime.dwLowDateTime=0xba6c2540, ftLastAccessTime.dwHighDateTime=0x1d353d7, ftLastWriteTime.dwLowDateTime=0xba6c2540, ftLastWriteTime.dwHighDateTime=0x1d353d7, nFileSizeHigh=0x0, nFileSizeLow=0x9e06)) returned 1 [0031.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e844) returned 1 [0031.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", nBufferLength=0x105, lpBuffer=0x33e3d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf", lpFilePart=0x0) returned 0x60 [0031.823] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\pvdit6.pdf")) returned 1 [0031.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7f4) returned 1 [0031.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e870 | out: lpFileInformation=0x33e870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x704c1fd6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704c1fd6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7f0) returned 1 [0031.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7e8) returned 1 [0031.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e864 | out: lpFileInformation=0x33e864*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x704c1fd6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704c1fd6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7e4) returned 1 [0031.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e858) returned 1 [0031.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.824] GetFullPathNameW (in: lpFileName="hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x29 [0031.824] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFindFileData=0x33e580 | out: lpFindFileData=0x33e580) returned 0x4dc598 [0031.824] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e590 | out: lpFindFileData=0x33e590) returned 0 [0031.824] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0031.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e818) returned 1 [0031.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e824) returned 1 [0031.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\.", nBufferLength=0x105, lpBuffer=0x33e308, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e88c) returned 1 [0031.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", lpFilePart=0x0) returned 0x56 [0031.825] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\*", lpFindFileData=0x33e5b4 | out: lpFindFileData=0x33e5b4) returned 0x4dc598 [0031.825] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.825] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.825] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.825] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.825] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.825] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.825] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 0 [0031.825] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0031.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e84c) returned 1 [0031.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7f4) returned 1 [0031.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e870 | out: lpFileInformation=0x33e870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x704c1fd6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704c1fd6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7f0) returned 1 [0031.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7e8) returned 1 [0031.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e864 | out: lpFileInformation=0x33e864*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x704c1fd6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704c1fd6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7e4) returned 1 [0031.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e858) returned 1 [0031.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.826] GetFullPathNameW (in: lpFileName="hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x29 [0031.826] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFindFileData=0x33e580 | out: lpFindFileData=0x33e580) returned 0x4dc3d8 [0031.826] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e590 | out: lpFindFileData=0x33e590) returned 0 [0031.826] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e818) returned 1 [0031.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e824) returned 1 [0031.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\.", nBufferLength=0x105, lpBuffer=0x33e308, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e88c) returned 1 [0031.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", lpFilePart=0x0) returned 0x56 [0031.826] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\*", lpFindFileData=0x33e5b4 | out: lpFindFileData=0x33e5b4) returned 0x4dc798 [0031.827] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.827] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.827] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.827] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.827] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.827] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.827] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 0 [0031.827] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e84c) returned 1 [0031.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", nBufferLength=0x105, lpBuffer=0x33e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", lpFilePart=0x0) returned 0x6c [0031.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7e4) returned 1 [0031.827] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\u2 jrsbzpir7oxwwq.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.827] GetFileType (hFile=0x2a4) returned 0x1 [0031.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7e0) returned 1 [0031.827] GetFileType (hFile=0x2a4) returned 0x1 [0031.827] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e8e8 | out: lpFileSizeHigh=0x33e8e8*=0x0) returned 0x123ba [0031.828] ReadFile (in: hFile=0x2a4, lpBuffer=0x2040f44, nNumberOfBytesToRead=0x123ba, lpNumberOfBytesRead=0x33e894, lpOverlapped=0x0 | out: lpBuffer=0x2040f44*, lpNumberOfBytesRead=0x33e894*=0x123ba, lpOverlapped=0x0) returned 1 [0031.828] CloseHandle (hObject=0x2a4) returned 1 [0031.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx.Lime", nBufferLength=0x105, lpBuffer=0x33e2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx.Lime", lpFilePart=0x0) returned 0x71 [0031.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7cc) returned 1 [0031.830] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\u2 jrsbzpir7oxwwq.pptx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.830] GetFileType (hFile=0x2a4) returned 0x1 [0031.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7c8) returned 1 [0031.830] GetFileType (hFile=0x2a4) returned 0x1 [0031.830] WriteFile (in: hFile=0x2a4, lpBuffer=0x2053930*, nNumberOfBytesToWrite=0x123c0, lpNumberOfBytesWritten=0x33e884, lpOverlapped=0x0 | out: lpBuffer=0x2053930*, lpNumberOfBytesWritten=0x33e884*=0x123c0, lpOverlapped=0x0) returned 1 [0031.831] CloseHandle (hObject=0x2a4) returned 1 [0031.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7f4) returned 1 [0031.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e870 | out: lpFileInformation=0x33e870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x704c1fd6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704c1fd6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7f0) returned 1 [0031.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7e8) returned 1 [0031.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e864 | out: lpFileInformation=0x33e864*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x704c1fd6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704c1fd6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7e4) returned 1 [0031.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e858) returned 1 [0031.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.833] GetFullPathNameW (in: lpFileName="hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x29 [0031.833] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFindFileData=0x33e580 | out: lpFindFileData=0x33e580) returned 0x4dc898 [0031.833] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e590 | out: lpFindFileData=0x33e590) returned 0 [0031.833] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0031.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e818) returned 1 [0031.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e824) returned 1 [0031.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\.", nBufferLength=0x105, lpBuffer=0x33e308, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e88c) returned 1 [0031.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", lpFilePart=0x0) returned 0x56 [0031.833] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\*", lpFindFileData=0x33e5b4 | out: lpFindFileData=0x33e5b4) returned 0x4dc698 [0031.834] FindNextFileW (in: hFindFile=0x4dc698, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.834] FindNextFileW (in: hFindFile=0x4dc698, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.834] FindNextFileW (in: hFindFile=0x4dc698, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.834] FindNextFileW (in: hFindFile=0x4dc698, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.834] FindNextFileW (in: hFindFile=0x4dc698, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.834] FindNextFileW (in: hFindFile=0x4dc698, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.834] FindNextFileW (in: hFindFile=0x4dc698, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.834] FindNextFileW (in: hFindFile=0x4dc698, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 0 [0031.834] FindClose (in: hFindFile=0x4dc698 | out: hFindFile=0x4dc698) returned 1 [0031.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e84c) returned 1 [0031.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", lpFilePart=0x0) returned 0x6c [0031.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", nBufferLength=0x105, lpBuffer=0x33e394, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", lpFilePart=0x0) returned 0x6c [0031.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", nBufferLength=0x105, lpBuffer=0x33e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", lpFilePart=0x0) returned 0x6c [0031.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e394, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", lpFilePart=0x0) returned 0x6c [0031.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e810) returned 1 [0031.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\u2 jrsbzpir7oxwwq.pptx"), fInfoLevelId=0x0, lpFileInformation=0x33e88c | out: lpFileInformation=0x33e88c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fcc6890, ftCreationTime.dwHighDateTime=0x1d35702, ftLastAccessTime.dwLowDateTime=0x6e056f50, ftLastAccessTime.dwHighDateTime=0x1d34d87, ftLastWriteTime.dwLowDateTime=0x6e056f50, ftLastWriteTime.dwHighDateTime=0x1d34d87, nFileSizeHigh=0x0, nFileSizeLow=0x123ba)) returned 1 [0031.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e80c) returned 1 [0031.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e874) returned 1 [0031.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e35c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", nBufferLength=0x105, lpBuffer=0x33e318, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", lpFilePart=0x0) returned 0x6c [0031.835] GetFullPathNameW (in: lpFileName="U2 jrSbzpiR7OxWWq.pptx", nBufferLength=0x105, lpBuffer=0x33e318, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\U2 jrSbzpiR7OxWWq.pptx", lpFilePart=0x0) returned 0x33 [0031.835] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", lpFindFileData=0x33e59c | out: lpFindFileData=0x33e59c) returned 0x4dc358 [0031.835] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e5ac | out: lpFindFileData=0x33e5ac) returned 0 [0031.835] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e834) returned 1 [0031.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e840) returned 1 [0031.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", nBufferLength=0x105, lpBuffer=0x33e324, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", lpFilePart=0x0) returned 0x6c [0031.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", lpFilePart=0x0) returned 0x6c [0031.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", nBufferLength=0x105, lpBuffer=0x33e3c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", lpFilePart=0x0) returned 0x6c [0031.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e848) returned 1 [0031.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\u2 jrsbzpir7oxwwq.pptx"), fInfoLevelId=0x0, lpFileInformation=0x33e8c4 | out: lpFileInformation=0x33e8c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fcc6890, ftCreationTime.dwHighDateTime=0x1d35702, ftLastAccessTime.dwLowDateTime=0x6e056f50, ftLastAccessTime.dwHighDateTime=0x1d34d87, ftLastWriteTime.dwLowDateTime=0x6e056f50, ftLastWriteTime.dwHighDateTime=0x1d34d87, nFileSizeHigh=0x0, nFileSizeLow=0x123ba)) returned 1 [0031.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e844) returned 1 [0031.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", nBufferLength=0x105, lpBuffer=0x33e3d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx", lpFilePart=0x0) returned 0x6c [0031.835] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\U2 jrSbzpiR7OxWWq.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\u2 jrsbzpir7oxwwq.pptx")) returned 1 [0031.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7f4) returned 1 [0031.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e870 | out: lpFileInformation=0x33e870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x704e8252, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704e8252, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7f0) returned 1 [0031.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7e8) returned 1 [0031.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e864 | out: lpFileInformation=0x33e864*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x704e8252, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704e8252, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7e4) returned 1 [0031.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e858) returned 1 [0031.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.837] GetFullPathNameW (in: lpFileName="hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x29 [0031.837] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFindFileData=0x33e580 | out: lpFindFileData=0x33e580) returned 0x4dc1d8 [0031.837] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e590 | out: lpFindFileData=0x33e590) returned 0 [0031.837] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e818) returned 1 [0031.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e824) returned 1 [0031.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\.", nBufferLength=0x105, lpBuffer=0x33e308, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e88c) returned 1 [0031.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", lpFilePart=0x0) returned 0x56 [0031.837] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\*", lpFindFileData=0x33e5b4 | out: lpFindFileData=0x33e5b4) returned 0x4dc798 [0031.838] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.838] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.838] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.838] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.838] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.838] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.838] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 0 [0031.838] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e84c) returned 1 [0031.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7f4) returned 1 [0031.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e870 | out: lpFileInformation=0x33e870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x704e8252, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704e8252, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7f0) returned 1 [0031.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7e8) returned 1 [0031.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e864 | out: lpFileInformation=0x33e864*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x704e8252, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704e8252, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7e4) returned 1 [0031.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e858) returned 1 [0031.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.839] GetFullPathNameW (in: lpFileName="hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x29 [0031.839] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFindFileData=0x33e580 | out: lpFindFileData=0x33e580) returned 0x4dc618 [0031.839] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e590 | out: lpFindFileData=0x33e590) returned 0 [0031.839] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0031.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e818) returned 1 [0031.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e824) returned 1 [0031.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\.", nBufferLength=0x105, lpBuffer=0x33e308, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e88c) returned 1 [0031.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", lpFilePart=0x0) returned 0x56 [0031.839] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\*", lpFindFileData=0x33e5b4 | out: lpFindFileData=0x33e5b4) returned 0x4dc2d8 [0031.839] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.840] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.840] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.840] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.840] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.840] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.840] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 0 [0031.840] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e84c) returned 1 [0031.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", nBufferLength=0x105, lpBuffer=0x33e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", lpFilePart=0x0) returned 0x62 [0031.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7e4) returned 1 [0031.840] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\w anjoz7.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.840] GetFileType (hFile=0x2a4) returned 0x1 [0031.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7e0) returned 1 [0031.840] GetFileType (hFile=0x2a4) returned 0x1 [0031.840] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e8e8 | out: lpFileSizeHigh=0x33e8e8*=0x0) returned 0x392f [0031.840] ReadFile (in: hFile=0x2a4, lpBuffer=0x2075644, nNumberOfBytesToRead=0x392f, lpNumberOfBytesRead=0x33e894, lpOverlapped=0x0 | out: lpBuffer=0x2075644*, lpNumberOfBytesRead=0x33e894*=0x392f, lpOverlapped=0x0) returned 1 [0031.841] CloseHandle (hObject=0x2a4) returned 1 [0031.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc.Lime", nBufferLength=0x105, lpBuffer=0x33e2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc.Lime", lpFilePart=0x0) returned 0x67 [0031.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7cc) returned 1 [0031.841] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\w anjoz7.doc.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.842] GetFileType (hFile=0x2a4) returned 0x1 [0031.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7c8) returned 1 [0031.842] GetFileType (hFile=0x2a4) returned 0x1 [0031.842] WriteFile (in: hFile=0x2a4, lpBuffer=0x207958c*, nNumberOfBytesToWrite=0x3930, lpNumberOfBytesWritten=0x33e884, lpOverlapped=0x0 | out: lpBuffer=0x207958c*, lpNumberOfBytesWritten=0x33e884*=0x3930, lpOverlapped=0x0) returned 1 [0031.842] CloseHandle (hObject=0x2a4) returned 1 [0031.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7f4) returned 1 [0031.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e870 | out: lpFileInformation=0x33e870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x704e8252, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704e8252, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7f0) returned 1 [0031.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7e8) returned 1 [0031.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e864 | out: lpFileInformation=0x33e864*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x704e8252, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704e8252, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7e4) returned 1 [0031.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e858) returned 1 [0031.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.843] GetFullPathNameW (in: lpFileName="hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x29 [0031.843] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFindFileData=0x33e580 | out: lpFindFileData=0x33e580) returned 0x4dc898 [0031.844] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e590 | out: lpFindFileData=0x33e590) returned 0 [0031.844] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0031.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e818) returned 1 [0031.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e824) returned 1 [0031.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\.", nBufferLength=0x105, lpBuffer=0x33e308, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e88c) returned 1 [0031.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", lpFilePart=0x0) returned 0x56 [0031.844] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\*", lpFindFileData=0x33e5b4 | out: lpFindFileData=0x33e5b4) returned 0x4dc8d8 [0031.844] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.844] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.844] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.844] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.844] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.844] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.844] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.845] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 0 [0031.845] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0031.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e84c) returned 1 [0031.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", lpFilePart=0x0) returned 0x62 [0031.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", nBufferLength=0x105, lpBuffer=0x33e394, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", lpFilePart=0x0) returned 0x62 [0031.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", nBufferLength=0x105, lpBuffer=0x33e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", lpFilePart=0x0) returned 0x62 [0031.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e394, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", lpFilePart=0x0) returned 0x62 [0031.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e810) returned 1 [0031.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\w anjoz7.doc"), fInfoLevelId=0x0, lpFileInformation=0x33e88c | out: lpFileInformation=0x33e88c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1450ea0, ftCreationTime.dwHighDateTime=0x1d3547f, ftLastAccessTime.dwLowDateTime=0x8f384f70, ftLastAccessTime.dwHighDateTime=0x1d35206, ftLastWriteTime.dwLowDateTime=0x8f384f70, ftLastWriteTime.dwHighDateTime=0x1d35206, nFileSizeHigh=0x0, nFileSizeLow=0x392f)) returned 1 [0031.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e80c) returned 1 [0031.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e874) returned 1 [0031.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e35c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", nBufferLength=0x105, lpBuffer=0x33e318, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", lpFilePart=0x0) returned 0x62 [0031.845] GetFullPathNameW (in: lpFileName="w anjoZ7.doc", nBufferLength=0x105, lpBuffer=0x33e318, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\w anjoZ7.doc", lpFilePart=0x0) returned 0x29 [0031.845] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", lpFindFileData=0x33e59c | out: lpFindFileData=0x33e59c) returned 0x4dc798 [0031.845] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e5ac | out: lpFindFileData=0x33e5ac) returned 0 [0031.845] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e834) returned 1 [0031.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e840) returned 1 [0031.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", nBufferLength=0x105, lpBuffer=0x33e324, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", lpFilePart=0x0) returned 0x62 [0031.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", lpFilePart=0x0) returned 0x62 [0031.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", nBufferLength=0x105, lpBuffer=0x33e3c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", lpFilePart=0x0) returned 0x62 [0031.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e848) returned 1 [0031.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\w anjoz7.doc"), fInfoLevelId=0x0, lpFileInformation=0x33e8c4 | out: lpFileInformation=0x33e8c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1450ea0, ftCreationTime.dwHighDateTime=0x1d3547f, ftLastAccessTime.dwLowDateTime=0x8f384f70, ftLastAccessTime.dwHighDateTime=0x1d35206, ftLastWriteTime.dwLowDateTime=0x8f384f70, ftLastWriteTime.dwHighDateTime=0x1d35206, nFileSizeHigh=0x0, nFileSizeLow=0x392f)) returned 1 [0031.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e844) returned 1 [0031.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", nBufferLength=0x105, lpBuffer=0x33e3d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc", lpFilePart=0x0) returned 0x62 [0031.846] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\w anjoZ7.doc" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\w anjoz7.doc")) returned 1 [0031.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e378, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7f4) returned 1 [0031.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e870 | out: lpFileInformation=0x33e870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x704e8252, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704e8252, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7f0) returned 1 [0031.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e7e8) returned 1 [0031.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x33e864 | out: lpFileInformation=0x33e864*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x704e8252, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x704e8252, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e7e4) returned 1 [0031.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e858) returned 1 [0031.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", nBufferLength=0x105, lpBuffer=0x33e340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA", lpFilePart=0x0) returned 0x48 [0031.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.847] GetFullPathNameW (in: lpFileName="hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x29 [0031.847] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFindFileData=0x33e580 | out: lpFindFileData=0x33e580) returned 0x4dc618 [0031.847] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e590 | out: lpFindFileData=0x33e590) returned 0 [0031.847] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0031.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e818) returned 1 [0031.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e824) returned 1 [0031.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\.", nBufferLength=0x105, lpBuffer=0x33e308, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e88c) returned 1 [0031.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFilePart=0x0) returned 0x55 [0031.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\", lpFilePart=0x0) returned 0x56 [0031.847] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\*", lpFindFileData=0x33e5b4 | out: lpFindFileData=0x33e5b4) returned 0x4dc418 [0031.848] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.848] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.848] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.848] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.848] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.848] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 1 [0031.848] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e5c4 | out: lpFindFileData=0x33e5c4) returned 0 [0031.848] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0031.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e84c) returned 1 [0031.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70390e5e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70390e5e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70390e5e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70390e5e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.849] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0031.849] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc358 [0031.849] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.849] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0031.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0031.849] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc498 [0031.849] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.849] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.850] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.850] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.850] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.850] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.850] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.850] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.850] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.850] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.850] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.850] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0031.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8609e70, ftCreationTime.dwHighDateTime=0x1d3535b, ftLastAccessTime.dwLowDateTime=0xe8914e30, ftLastAccessTime.dwHighDateTime=0x1d34c5e, ftLastWriteTime.dwLowDateTime=0xe8914e30, ftLastWriteTime.dwHighDateTime=0x1d34c5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8609e70, ftCreationTime.dwHighDateTime=0x1d3535b, ftLastAccessTime.dwLowDateTime=0xe8914e30, ftLastAccessTime.dwHighDateTime=0x1d34c5e, ftLastWriteTime.dwLowDateTime=0xe8914e30, ftLastWriteTime.dwHighDateTime=0x1d34c5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.851] GetFullPathNameW (in: lpFileName="Vksw T", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Vksw T", lpFilePart=0x0) returned 0x23 [0031.851] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc898 [0031.851] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.851] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0031.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\", lpFilePart=0x0) returned 0x33 [0031.852] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc798 [0031.852] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.852] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.852] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.852] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.852] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.852] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.852] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.852] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8609e70, ftCreationTime.dwHighDateTime=0x1d3535b, ftLastAccessTime.dwLowDateTime=0xe8914e30, ftLastAccessTime.dwHighDateTime=0x1d34c5e, ftLastWriteTime.dwLowDateTime=0xe8914e30, ftLastWriteTime.dwHighDateTime=0x1d34c5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8609e70, ftCreationTime.dwHighDateTime=0x1d3535b, ftLastAccessTime.dwLowDateTime=0xe8914e30, ftLastAccessTime.dwHighDateTime=0x1d34c5e, ftLastWriteTime.dwLowDateTime=0xe8914e30, ftLastWriteTime.dwHighDateTime=0x1d34c5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.853] GetFullPathNameW (in: lpFileName="Vksw T", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Vksw T", lpFilePart=0x0) returned 0x23 [0031.853] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc458 [0031.853] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.853] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0031.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\", lpFilePart=0x0) returned 0x33 [0031.853] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc7d8 [0031.853] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.853] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.854] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.854] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.854] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.854] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.854] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.854] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8609e70, ftCreationTime.dwHighDateTime=0x1d3535b, ftLastAccessTime.dwLowDateTime=0xe8914e30, ftLastAccessTime.dwHighDateTime=0x1d34c5e, ftLastWriteTime.dwLowDateTime=0xe8914e30, ftLastWriteTime.dwHighDateTime=0x1d34c5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8609e70, ftCreationTime.dwHighDateTime=0x1d3535b, ftLastAccessTime.dwLowDateTime=0xe8914e30, ftLastAccessTime.dwHighDateTime=0x1d34c5e, ftLastWriteTime.dwLowDateTime=0xe8914e30, ftLastWriteTime.dwHighDateTime=0x1d34c5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.854] GetFullPathNameW (in: lpFileName="Vksw T", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Vksw T", lpFilePart=0x0) returned 0x23 [0031.855] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc458 [0031.855] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.855] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0031.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\", lpFilePart=0x0) returned 0x33 [0031.855] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc918 [0031.855] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.855] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.855] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.855] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.855] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.855] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.855] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.856] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0031.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", nBufferLength=0x105, lpBuffer=0x33e348, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", lpFilePart=0x0) returned 0x3e [0031.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e85c) returned 1 [0031.856] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t\\77jqfti.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.856] GetFileType (hFile=0x2a4) returned 0x1 [0031.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.856] GetFileType (hFile=0x2a4) returned 0x1 [0031.856] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e960 | out: lpFileSizeHigh=0x33e960*=0x0) returned 0x11213 [0031.856] ReadFile (in: hFile=0x2a4, lpBuffer=0x2095618, nNumberOfBytesToRead=0x11213, lpNumberOfBytesRead=0x33e90c, lpOverlapped=0x0 | out: lpBuffer=0x2095618*, lpNumberOfBytesRead=0x33e90c*=0x11213, lpOverlapped=0x0) returned 1 [0031.856] CloseHandle (hObject=0x2a4) returned 1 [0031.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv.Lime", lpFilePart=0x0) returned 0x43 [0031.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e844) returned 1 [0031.858] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t\\77jqfti.csv.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.858] GetFileType (hFile=0x2a4) returned 0x1 [0031.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e840) returned 1 [0031.859] GetFileType (hFile=0x2a4) returned 0x1 [0031.859] WriteFile (in: hFile=0x2a4, lpBuffer=0x20a6e08*, nNumberOfBytesToWrite=0x11220, lpNumberOfBytesWritten=0x33e8fc, lpOverlapped=0x0 | out: lpBuffer=0x20a6e08*, lpNumberOfBytesWritten=0x33e8fc*=0x11220, lpOverlapped=0x0) returned 1 [0031.860] CloseHandle (hObject=0x2a4) returned 1 [0031.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8609e70, ftCreationTime.dwHighDateTime=0x1d3535b, ftLastAccessTime.dwLowDateTime=0x7050e497, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7050e497, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8609e70, ftCreationTime.dwHighDateTime=0x1d3535b, ftLastAccessTime.dwLowDateTime=0x7050e497, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7050e497, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.861] GetFullPathNameW (in: lpFileName="Vksw T", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Vksw T", lpFilePart=0x0) returned 0x23 [0031.861] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc498 [0031.862] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.862] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0031.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\", lpFilePart=0x0) returned 0x33 [0031.862] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc558 [0031.862] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.862] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.862] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.862] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.862] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.862] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.862] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.862] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.862] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0031.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", lpFilePart=0x0) returned 0x3e [0031.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", lpFilePart=0x0) returned 0x3e [0031.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", nBufferLength=0x105, lpBuffer=0x33e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", lpFilePart=0x0) returned 0x3e [0031.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", lpFilePart=0x0) returned 0x3e [0031.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e888) returned 1 [0031.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t\\77jqfti.csv"), fInfoLevelId=0x0, lpFileInformation=0x33e904 | out: lpFileInformation=0x33e904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68fa92e0, ftCreationTime.dwHighDateTime=0x1d35590, ftLastAccessTime.dwLowDateTime=0x7f2266d0, ftLastAccessTime.dwHighDateTime=0x1d34c97, ftLastWriteTime.dwLowDateTime=0x7f2266d0, ftLastWriteTime.dwHighDateTime=0x1d34c97, nFileSizeHigh=0x0, nFileSizeLow=0x11213)) returned 1 [0031.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e884) returned 1 [0031.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8ec) returned 1 [0031.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", lpFilePart=0x0) returned 0x3e [0031.863] GetFullPathNameW (in: lpFileName="77jQfTI.csv", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\77jQfTI.csv", lpFilePart=0x0) returned 0x28 [0031.863] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", lpFindFileData=0x33e614 | out: lpFindFileData=0x33e614) returned 0x4dc1d8 [0031.863] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e624 | out: lpFindFileData=0x33e624) returned 0 [0031.863] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8ac) returned 1 [0031.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", nBufferLength=0x105, lpBuffer=0x33e39c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", lpFilePart=0x0) returned 0x3e [0031.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", lpFilePart=0x0) returned 0x3e [0031.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", nBufferLength=0x105, lpBuffer=0x33e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", lpFilePart=0x0) returned 0x3e [0031.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c0) returned 1 [0031.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t\\77jqfti.csv"), fInfoLevelId=0x0, lpFileInformation=0x33e93c | out: lpFileInformation=0x33e93c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68fa92e0, ftCreationTime.dwHighDateTime=0x1d35590, ftLastAccessTime.dwLowDateTime=0x7f2266d0, ftLastAccessTime.dwHighDateTime=0x1d34c97, ftLastWriteTime.dwLowDateTime=0x7f2266d0, ftLastWriteTime.dwHighDateTime=0x1d34c97, nFileSizeHigh=0x0, nFileSizeLow=0x11213)) returned 1 [0031.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8bc) returned 1 [0031.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv", lpFilePart=0x0) returned 0x3e [0031.863] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\77jQfTI.csv" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t\\77jqfti.csv")) returned 1 [0031.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8609e70, ftCreationTime.dwHighDateTime=0x1d3535b, ftLastAccessTime.dwLowDateTime=0x7050e497, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7050e497, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8609e70, ftCreationTime.dwHighDateTime=0x1d3535b, ftLastAccessTime.dwLowDateTime=0x7050e497, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7050e497, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.865] GetFullPathNameW (in: lpFileName="Vksw T", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Vksw T", lpFilePart=0x0) returned 0x23 [0031.865] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc558 [0031.865] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.865] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0031.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\", lpFilePart=0x0) returned 0x33 [0031.865] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc798 [0031.865] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.865] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.866] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.866] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.866] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.866] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.866] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.866] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8609e70, ftCreationTime.dwHighDateTime=0x1d3535b, ftLastAccessTime.dwLowDateTime=0x7050e497, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7050e497, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8609e70, ftCreationTime.dwHighDateTime=0x1d3535b, ftLastAccessTime.dwLowDateTime=0x7050e497, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7050e497, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.873] GetFullPathNameW (in: lpFileName="Vksw T", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Vksw T", lpFilePart=0x0) returned 0x23 [0031.873] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc298 [0031.873] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.873] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0031.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\", lpFilePart=0x0) returned 0x33 [0031.873] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc1d8 [0031.873] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.873] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.873] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.874] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.874] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.874] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.874] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.874] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\9bwEefny0rpp.ods", nBufferLength=0x105, lpBuffer=0x33e348, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\9bwEefny0rpp.ods", lpFilePart=0x0) returned 0x43 [0031.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e85c) returned 1 [0031.874] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\9bwEefny0rpp.ods" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t\\9bweefny0rpp.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.874] GetFileType (hFile=0x2a4) returned 0x1 [0031.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.874] GetFileType (hFile=0x2a4) returned 0x1 [0031.874] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e960 | out: lpFileSizeHigh=0x33e960*=0x0) returned 0x7c8b [0031.874] ReadFile (in: hFile=0x2a4, lpBuffer=0x20c4468, nNumberOfBytesToRead=0x7c8b, lpNumberOfBytesRead=0x33e90c, lpOverlapped=0x0 | out: lpBuffer=0x20c4468*, lpNumberOfBytesRead=0x33e90c*=0x7c8b, lpOverlapped=0x0) returned 1 [0031.875] CloseHandle (hObject=0x2a4) returned 1 [0031.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\9bwEefny0rpp.ods.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\9bwEefny0rpp.ods.Lime", lpFilePart=0x0) returned 0x48 [0031.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e844) returned 1 [0031.876] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\9bwEefny0rpp.ods.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t\\9bweefny0rpp.ods.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.876] GetFileType (hFile=0x2a4) returned 0x1 [0031.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e840) returned 1 [0031.876] GetFileType (hFile=0x2a4) returned 0x1 [0031.876] WriteFile (in: hFile=0x2a4, lpBuffer=0x20cc6d4*, nNumberOfBytesToWrite=0x7c90, lpNumberOfBytesWritten=0x33e8fc, lpOverlapped=0x0 | out: lpBuffer=0x20cc6d4*, lpNumberOfBytesWritten=0x33e8fc*=0x7c90, lpOverlapped=0x0) returned 1 [0031.877] CloseHandle (hObject=0x2a4) returned 1 [0031.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8609e70, ftCreationTime.dwHighDateTime=0x1d3535b, ftLastAccessTime.dwLowDateTime=0x705346df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705346df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\vksw t"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8609e70, ftCreationTime.dwHighDateTime=0x1d3535b, ftLastAccessTime.dwLowDateTime=0x705346df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705346df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0031.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.878] GetFullPathNameW (in: lpFileName="Vksw T", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Vksw T", lpFilePart=0x0) returned 0x23 [0031.878] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc1d8 [0031.878] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.878] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T", lpFilePart=0x0) returned 0x32 [0031.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\", lpFilePart=0x0) returned 0x33 [0031.879] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc618 [0031.879] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.879] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.879] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.879] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.879] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.879] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.879] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.879] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.879] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0031.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\9bwEefny0rpp.ods", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\9bwEefny0rpp.ods", lpFilePart=0x0) returned 0x43 [0031.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\9bwEefny0rpp.ods", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\9bwEefny0rpp.ods", lpFilePart=0x0) returned 0x43 [0031.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\9bwEefny0rpp.ods", nBufferLength=0x105, lpBuffer=0x33e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\Vksw T\\9bwEefny0rpp.ods", lpFilePart=0x0) returned 0x43 [0031.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e888) returned 1 [0031.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e884) returned 1 [0031.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8ec) returned 1 [0031.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8ac) returned 1 [0031.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c0) returned 1 [0031.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8bc) returned 1 [0031.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e85c) returned 1 [0031.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e844) returned 1 [0031.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e840) returned 1 [0031.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e888) returned 1 [0031.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e884) returned 1 [0031.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8ec) returned 1 [0031.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8ac) returned 1 [0031.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c0) returned 1 [0031.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.917] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.917] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc3d8 [0031.917] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.917] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.917] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc2d8 [0031.917] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.918] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.918] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.918] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.918] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.918] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.918] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.918] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.918] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.918] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.918] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.918] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.919] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.919] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.919] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.919] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.919] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.919] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.919] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.919] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.919] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.919] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.919] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.920] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.920] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.920] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.920] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.920] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.920] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.920] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.920] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.920] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.920] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0031.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0031.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0031.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0031.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xf8e331aa, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xf8e331aa, ftLastAccessTime.dwHighDateTime=0x1d2ced7, ftLastWriteTime.dwLowDateTime=0xf8e331aa, ftLastWriteTime.dwHighDateTime=0x1d2ced7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0031.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xf8e331aa, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xf8e331aa, ftLastAccessTime.dwHighDateTime=0x1d2ced7, ftLastWriteTime.dwLowDateTime=0xf8e331aa, ftLastWriteTime.dwHighDateTime=0x1d2ced7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0031.921] GetFullPathNameW (in: lpFileName="My Pictures", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Pictures", lpFilePart=0x0) returned 0x28 [0031.921] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc558 [0031.921] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.921] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0031.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0031.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0031.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x2b [0031.922] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0xffffffff [0031.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e904) returned 1 [0031.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.923] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.923] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc798 [0031.923] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.923] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0031.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.924] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc598 [0031.924] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.924] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.924] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.924] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.924] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.924] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.924] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.924] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.924] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.925] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.925] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.925] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.925] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.925] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.925] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.925] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.925] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.925] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.925] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.925] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.925] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.925] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.925] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.926] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.926] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.926] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.926] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.926] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.926] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.926] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.926] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.926] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.926] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0031.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.927] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0031.927] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc498 [0031.927] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.927] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0031.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0031.928] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc3d8 [0031.928] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.928] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.928] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.928] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.928] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.928] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.929] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0031.929] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc3d8 [0031.929] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.929] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0031.929] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc1d8 [0031.929] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.929] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.930] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.930] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.930] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.930] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.930] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0031.930] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc1d8 [0031.931] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.931] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0031.931] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc918 [0031.931] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.931] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.931] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.931] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.931] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.931] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0031.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x34 [0031.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0031.932] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.932] GetFileType (hFile=0x2a4) returned 0x1 [0031.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0031.932] GetFileType (hFile=0x2a4) returned 0x1 [0031.932] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0xd8 [0031.932] ReadFile (in: hFile=0x2a4, lpBuffer=0x21925a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x21925a8*, lpNumberOfBytesRead=0x33e948*=0xd8, lpOverlapped=0x0) returned 1 [0031.933] CloseHandle (hObject=0x2a4) returned 1 [0031.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", lpFilePart=0x0) returned 0x39 [0031.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0031.933] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\desktop.ini.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.941] GetFileType (hFile=0x2a4) returned 0x1 [0031.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0031.941] GetFileType (hFile=0x2a4) returned 0x1 [0031.941] WriteFile (in: hFile=0x2a4, lpBuffer=0x2193d80*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x33e90c, lpOverlapped=0x0 | out: lpBuffer=0x2193d80*, lpNumberOfBytesWritten=0x33e90c*=0xe0, lpOverlapped=0x0) returned 1 [0031.942] CloseHandle (hObject=0x2a4) returned 1 [0031.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705cd06d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705cd06d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705cd06d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705cd06d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.943] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0031.943] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc2d8 [0031.943] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.943] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0031.944] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc3d8 [0031.944] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.944] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.944] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.944] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.944] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.944] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.944] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x34 [0031.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x34 [0031.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x34 [0031.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x34 [0031.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0031.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0031.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0031.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0031.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x34 [0031.945] GetFullPathNameW (in: lpFileName="desktop.ini", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x28 [0031.945] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc558 [0031.945] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0031.945] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0031.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0031.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0031.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x34 [0031.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x34 [0031.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x34 [0031.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0031.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0031.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0031.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x34 [0031.945] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\desktop.ini")) returned 1 [0031.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.946] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0031.946] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc498 [0031.946] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.946] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0031.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0031.947] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc2d8 [0031.947] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.947] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.947] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.947] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.947] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.947] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.948] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0031.948] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc558 [0031.948] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.948] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0031.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0031.948] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc7d8 [0031.948] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.948] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.948] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.949] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.949] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.949] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x37 [0031.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0031.949] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\favorites.vssx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.949] GetFileType (hFile=0x2a4) returned 0x1 [0031.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0031.949] GetFileType (hFile=0x2a4) returned 0x1 [0031.950] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x0 [0031.950] CloseHandle (hObject=0x2a4) returned 1 [0031.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", lpFilePart=0x0) returned 0x3c [0031.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0031.950] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\favorites.vssx.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.950] GetFileType (hFile=0x2a4) returned 0x1 [0031.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0031.950] GetFileType (hFile=0x2a4) returned 0x1 [0031.950] WriteFile (in: hFile=0x2a4, lpBuffer=0x219fb20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x33e90c, lpOverlapped=0x0 | out: lpBuffer=0x219fb20*, lpNumberOfBytesWritten=0x33e90c*=0x10, lpOverlapped=0x0) returned 1 [0031.951] CloseHandle (hObject=0x2a4) returned 1 [0031.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.952] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0031.952] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc598 [0031.952] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.952] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0031.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0031.952] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc518 [0031.952] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.953] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.953] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.953] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.953] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.953] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.953] FindClose (in: hFindFile=0x4dc518 | out: hFindFile=0x4dc518) returned 1 [0031.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x37 [0031.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x37 [0031.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x37 [0031.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x37 [0031.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0031.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\favorites.vssx"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c042fd4, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c042fd4, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0031.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0031.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x37 [0031.953] GetFullPathNameW (in: lpFileName="Favorites.vssx", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Favorites.vssx", lpFilePart=0x0) returned 0x2b [0031.953] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc7d8 [0031.953] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0031.954] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0031.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0031.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x37 [0031.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x37 [0031.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x37 [0031.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0031.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\favorites.vssx"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c042fd4, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c042fd4, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0031.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x37 [0031.954] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\favorites.vssx")) returned 1 [0031.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.955] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0031.955] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc1d8 [0031.955] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.955] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0031.955] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc1d8 [0031.955] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.955] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.955] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.955] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.955] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.955] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0031.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.956] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0031.956] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc2d8 [0031.956] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.956] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0031.956] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc4d8 [0031.957] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.957] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.957] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.957] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.957] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.957] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0031.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.958] GetFullPathNameW (in: lpFileName="_private", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_private", lpFilePart=0x0) returned 0x25 [0031.958] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc3d8 [0031.958] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.958] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x32 [0031.959] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc2d8 [0031.959] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.959] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.959] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.959] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.960] GetFullPathNameW (in: lpFileName="_private", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_private", lpFilePart=0x0) returned 0x25 [0031.960] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc618 [0031.960] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.960] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0031.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x32 [0031.960] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc7d8 [0031.960] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.960] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.960] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.960] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0031.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.961] GetFullPathNameW (in: lpFileName="_private", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_private", lpFilePart=0x0) returned 0x25 [0031.961] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc618 [0031.961] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.961] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0031.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x32 [0031.961] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc4d8 [0031.961] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.962] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.962] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.962] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0031.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x33e348, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3c [0031.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e85c) returned 1 [0031.962] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.962] GetFileType (hFile=0x2a4) returned 0x1 [0031.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e858) returned 1 [0031.962] GetFileType (hFile=0x2a4) returned 0x1 [0031.962] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e960 | out: lpFileSizeHigh=0x33e960*=0x0) returned 0x74e6 [0031.962] ReadFile (in: hFile=0x2a4, lpBuffer=0x21b3314, nNumberOfBytesToRead=0x74e6, lpNumberOfBytesRead=0x33e90c, lpOverlapped=0x0 | out: lpBuffer=0x21b3314*, lpNumberOfBytesRead=0x33e90c*=0x74e6, lpOverlapped=0x0) returned 1 [0031.963] CloseHandle (hObject=0x2a4) returned 1 [0031.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", lpFilePart=0x0) returned 0x41 [0031.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e844) returned 1 [0031.964] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private\\folder.ico.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.964] GetFileType (hFile=0x2a4) returned 0x1 [0031.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e840) returned 1 [0031.964] GetFileType (hFile=0x2a4) returned 0x1 [0031.964] WriteFile (in: hFile=0x2a4, lpBuffer=0x21badd0*, nNumberOfBytesToWrite=0x74f0, lpNumberOfBytesWritten=0x33e8fc, lpOverlapped=0x0 | out: lpBuffer=0x21badd0*, lpNumberOfBytesWritten=0x33e8fc*=0x74f0, lpOverlapped=0x0) returned 1 [0031.965] CloseHandle (hObject=0x2a4) returned 1 [0031.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x706194c4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x706194c4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x706194c4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x706194c4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.966] GetFullPathNameW (in: lpFileName="_private", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_private", lpFilePart=0x0) returned 0x25 [0031.966] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc558 [0031.966] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.967] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0031.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x32 [0031.967] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc7d8 [0031.967] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.967] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.967] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.967] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.967] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3c [0031.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3c [0031.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x33e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3c [0031.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3c [0031.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e888) returned 1 [0031.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x33e904 | out: lpFileInformation=0x33e904*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x74e6)) returned 1 [0031.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e884) returned 1 [0031.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8ec) returned 1 [0031.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3c [0031.967] GetFullPathNameW (in: lpFileName="folder.ico", nBufferLength=0x105, lpBuffer=0x33e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\folder.ico", lpFilePart=0x0) returned 0x27 [0031.967] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", lpFindFileData=0x33e614 | out: lpFindFileData=0x33e614) returned 0x4dc7d8 [0031.968] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e624 | out: lpFindFileData=0x33e624) returned 0 [0031.968] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8ac) returned 1 [0031.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0031.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x33e39c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3c [0031.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3c [0031.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x33e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3c [0031.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c0) returned 1 [0031.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x33e93c | out: lpFileInformation=0x33e93c*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x4c790443, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4c790443, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x74e6)) returned 1 [0031.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8bc) returned 1 [0031.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3c [0031.968] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private\\folder.ico")) returned 1 [0031.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e86c) returned 1 [0031.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x706194c4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x706194c4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e868) returned 1 [0031.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e860) returned 1 [0031.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x706194c4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x706194c4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e85c) returned 1 [0031.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d0) returned 1 [0031.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x33e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0031.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.969] GetFullPathNameW (in: lpFileName="_private", nBufferLength=0x105, lpBuffer=0x33e374, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_private", lpFilePart=0x0) returned 0x25 [0031.969] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc418 [0031.969] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.969] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0031.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e890) returned 1 [0031.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e89c) returned 1 [0031.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\.", nBufferLength=0x105, lpBuffer=0x33e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e904) returned 1 [0031.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0031.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x32 [0031.969] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc3d8 [0031.970] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.970] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.970] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.970] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c4) returned 1 [0031.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0031.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0031.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.970] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0031.970] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc598 [0031.970] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.970] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0031.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0031.971] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc4d8 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.971] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.971] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0031.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", lpFilePart=0x0) returned 0x28 [0031.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", lpFilePart=0x0) returned 0x28 [0031.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", lpFilePart=0x0) returned 0x28 [0031.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", lpFilePart=0x0) returned 0x28 [0031.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xf8e331aa, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xf8e331aa, ftLastAccessTime.dwHighDateTime=0x1d2ced7, ftLastWriteTime.dwLowDateTime=0xf8e331aa, ftLastWriteTime.dwHighDateTime=0x1d2ced7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", lpFilePart=0x0) returned 0x28 [0031.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xf8e331aa, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xf8e331aa, ftLastAccessTime.dwHighDateTime=0x1d2ced7, ftLastWriteTime.dwLowDateTime=0xf8e331aa, ftLastWriteTime.dwHighDateTime=0x1d2ced7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0031.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", lpFilePart=0x0) returned 0x28 [0031.972] GetFullPathNameW (in: lpFileName="My Videos", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Videos", lpFilePart=0x0) returned 0x26 [0031.972] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc218 [0031.972] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.972] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0031.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", lpFilePart=0x0) returned 0x28 [0031.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos", lpFilePart=0x0) returned 0x28 [0031.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x29 [0031.972] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Videos\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0xffffffff [0031.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e904) returned 1 [0031.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0031.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0031.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0031.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0031.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0031.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0031.974] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc7d8 [0031.974] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0031.974] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0031.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0031.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0031.975] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc7d8 [0031.975] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.975] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.975] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.975] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.975] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.975] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.975] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.976] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.976] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.976] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.976] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.976] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.976] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.976] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.976] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.976] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.976] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.977] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.977] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.977] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.977] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.977] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.977] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.977] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.977] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.977] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.977] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.977] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.977] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.978] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.978] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0031.978] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0031.978] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0031.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0031.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2988839d, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x298faba1, ftLastAccessTime.dwHighDateTime=0x1d2d995, ftLastWriteTime.dwLowDateTime=0x298faba1, ftLastWriteTime.dwHighDateTime=0x1d2d995, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2988839d, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x298faba1, ftLastAccessTime.dwHighDateTime=0x1d2d995, ftLastWriteTime.dwLowDateTime=0x298faba1, ftLastWriteTime.dwHighDateTime=0x1d2d995, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.979] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc3d8 [0031.979] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.979] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.979] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc1d8 [0031.979] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.979] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.980] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.980] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0031.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0031.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0031.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2988839d, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x298faba1, ftLastAccessTime.dwHighDateTime=0x1d2d995, ftLastWriteTime.dwLowDateTime=0x298faba1, ftLastWriteTime.dwHighDateTime=0x1d2d995, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0031.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0031.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2988839d, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x298faba1, ftLastAccessTime.dwHighDateTime=0x1d2d995, ftLastWriteTime.dwLowDateTime=0x298faba1, ftLastWriteTime.dwHighDateTime=0x1d2d995, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0031.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0031.980] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc2d8 [0031.980] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.980] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0031.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0031.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0031.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0031.981] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc7d8 [0031.981] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.981] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.981] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.981] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2988839d, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x298faba1, ftLastAccessTime.dwHighDateTime=0x1d2d995, ftLastWriteTime.dwLowDateTime=0x298faba1, ftLastWriteTime.dwHighDateTime=0x1d2d995, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2988839d, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x298faba1, ftLastAccessTime.dwHighDateTime=0x1d2d995, ftLastWriteTime.dwLowDateTime=0x298faba1, ftLastWriteTime.dwHighDateTime=0x1d2d995, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.982] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc3d8 [0031.982] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0031.982] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.982] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc7d8 [0031.982] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.982] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0031.982] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0031.982] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x298faba1, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x2ab02707, ftLastAccessTime.dwHighDateTime=0x1d2d995, ftLastWriteTime.dwLowDateTime=0x2ab02707, ftLastWriteTime.dwHighDateTime=0x1d2d995, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x298faba1, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x2ab02707, ftLastAccessTime.dwHighDateTime=0x1d2d995, ftLastWriteTime.dwLowDateTime=0x2ab02707, ftLastWriteTime.dwHighDateTime=0x1d2d995, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.983] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc3d8 [0031.983] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.983] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0031.983] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc1d8 [0031.983] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.983] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.984] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.984] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.984] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x298faba1, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x2ab02707, ftLastAccessTime.dwHighDateTime=0x1d2d995, ftLastWriteTime.dwLowDateTime=0x2ab02707, ftLastWriteTime.dwHighDateTime=0x1d2d995, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x298faba1, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x2ab02707, ftLastAccessTime.dwHighDateTime=0x1d2d995, ftLastWriteTime.dwLowDateTime=0x2ab02707, ftLastWriteTime.dwHighDateTime=0x1d2d995, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.984] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc7d8 [0031.984] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.984] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.985] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc1d8 [0031.985] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.985] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.985] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.985] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.985] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0031.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook"), fInfoLevelId=0x0, lpFileInformation=0x33e8e8 | out: lpFileInformation=0x33e8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x298faba1, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x2ab02707, ftLastAccessTime.dwHighDateTime=0x1d2d995, ftLastWriteTime.dwLowDateTime=0x2ab02707, ftLastWriteTime.dwHighDateTime=0x1d2d995, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook"), fInfoLevelId=0x0, lpFileInformation=0x33e8dc | out: lpFileInformation=0x33e8dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x298faba1, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x2ab02707, ftLastAccessTime.dwHighDateTime=0x1d2d995, ftLastWriteTime.dwLowDateTime=0x2ab02707, ftLastWriteTime.dwHighDateTime=0x1d2d995, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.985] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc7d8 [0031.986] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0031.986] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0031.986] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc4d8 [0031.986] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.986] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.986] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0031.986] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0031.986] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0031.986] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0031.987] GetFileType (hFile=0x2a4) returned 0x1 [0031.987] GetFileType (hFile=0x2a4) returned 0x1 [0031.987] GetFileSize (in: hFile=0x2a4, lpFileSizeHigh=0x33e960 | out: lpFileSizeHigh=0x33e960*=0x0) returned 0x1828 [0031.987] ReadFile (in: hFile=0x2a4, lpBuffer=0x21e8648, nNumberOfBytesToRead=0x1828, lpNumberOfBytesRead=0x33e90c, lpOverlapped=0x0 | out: lpBuffer=0x21e8648*, lpNumberOfBytesRead=0x33e90c*=0x1828, lpOverlapped=0x0) returned 1 [0031.988] CloseHandle (hObject=0x2a4) returned 1 [0031.999] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc7d8 [0032.000] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0032.000] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.000] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc498 [0032.000] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.000] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.000] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.000] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.000] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0032.001] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0032.001] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2", lpFindFileData=0x33e614 | out: lpFindFileData=0x33e614) returned 0x4dc498 [0032.001] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e624 | out: lpFindFileData=0x33e624) returned 0 [0032.001] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0032.002] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc418 [0032.002] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0032.002] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0032.002] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc3d8 [0032.002] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.003] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.003] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.003] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0032.003] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.003] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc598 [0032.003] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0032.003] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0032.003] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc7d8 [0032.003] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.004] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.004] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.004] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0032.004] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.020] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc7d8 [0032.020] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0032.020] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.020] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc7d8 [0032.020] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.020] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.020] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.021] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.021] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0032.021] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.021] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one", lpFindFileData=0x33e614 | out: lpFindFileData=0x33e614) returned 0x4dc218 [0032.021] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e624 | out: lpFindFileData=0x33e624) returned 0 [0032.021] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0032.046] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook", lpFindFileData=0x33e5f8 | out: lpFindFileData=0x33e5f8) returned 0x4dc218 [0032.046] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e608 | out: lpFindFileData=0x33e608) returned 0 [0032.048] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0032.048] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x33e62c | out: lpFindFileData=0x33e62c) returned 0x4dc218 [0032.048] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.048] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.049] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 1 [0032.049] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e63c | out: lpFindFileData=0x33e63c) returned 0 [0032.049] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0032.049] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc3d8 [0032.049] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.049] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.050] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc218 [0032.050] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.050] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.050] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.050] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.050] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.051] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.051] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.051] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.051] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.051] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.051] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.051] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.052] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.052] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.052] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.052] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.052] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.052] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.052] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.052] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.053] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.053] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.053] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.053] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.053] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.053] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.053] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.054] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.054] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.054] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.054] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.054] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.054] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0032.054] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc218 [0032.055] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.055] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc7d8 [0032.055] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.055] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.055] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.055] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc7d8 [0032.055] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.056] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc218 [0032.056] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.056] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.056] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.056] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc598 [0032.056] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.056] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc418 [0032.057] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.057] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.057] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.070] ReadFile (in: hFile=0x2a4, lpBuffer=0x3029390, nNumberOfBytesToRead=0x42400, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x3029390*, lpNumberOfBytesRead=0x33e948*=0x42400, lpOverlapped=0x0) returned 1 [0032.075] CloseHandle (hObject=0x2a4) returned 1 [0032.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", lpFilePart=0x0) returned 0x49 [0032.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.082] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files\\cjeijc.diuv@div.com.pst.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2a4 [0032.082] GetFileType (hFile=0x2a4) returned 0x1 [0032.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.082] GetFileType (hFile=0x2a4) returned 0x1 [0032.082] WriteFile (in: hFile=0x2a4, lpBuffer=0x306b7b0*, nNumberOfBytesToWrite=0x42410, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x306b7b0*, lpNumberOfBytesWritten=0x33e938*=0x42410, lpOverlapped=0x0) returned 1 [0032.085] CloseHandle (hObject=0x2a4) returned 1 [0032.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0032.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x671c95f7, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x7072457b, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7072457b, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0032.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x671c95f7, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x7072457b, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7072457b, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0032.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0032.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.089] GetFullPathNameW (in: lpFileName="Outlook Files", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Outlook Files", lpFilePart=0x0) returned 0x2a [0032.089] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc558 [0032.089] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.089] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x2d [0032.089] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc3d8 [0032.089] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.089] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.090] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.090] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.090] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", lpFilePart=0x0) returned 0x44 [0032.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", lpFilePart=0x0) returned 0x44 [0032.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", lpFilePart=0x0) returned 0x44 [0032.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", lpFilePart=0x0) returned 0x44 [0032.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files\\cjeijc.diuv@div.com.pst"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x672ae419, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x672ae419, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x6e667d90, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1 [0032.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", lpFilePart=0x0) returned 0x44 [0032.090] GetFullPathNameW (in: lpFileName="cjeijc.diuv@div.com.pst", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\cjeijc.diuv@div.com.pst", lpFilePart=0x0) returned 0x34 [0032.090] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc498 [0032.091] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.091] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0032.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", lpFilePart=0x0) returned 0x44 [0032.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", lpFilePart=0x0) returned 0x44 [0032.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", lpFilePart=0x0) returned 0x44 [0032.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files\\cjeijc.diuv@div.com.pst"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x672ae419, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x672ae419, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x6e667d90, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1 [0032.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", lpFilePart=0x0) returned 0x44 [0032.091] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files\\cjeijc.diuv@div.com.pst")) returned 1 [0032.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0032.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x671c95f7, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x7074a976, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7074a976, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0032.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x671c95f7, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x7074a976, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7074a976, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0032.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0032.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.093] GetFullPathNameW (in: lpFileName="Outlook Files", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Outlook Files", lpFilePart=0x0) returned 0x2a [0032.093] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc298 [0032.093] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.094] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0032.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0032.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x2d [0032.094] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc558 [0032.094] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.094] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.094] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.094] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.094] CoTaskMemAlloc (cb=0x20c) returned 0x4f0058 [0032.094] SHGetFolderPathW (in: hwnd=0x0, csidl=39, hToken=0x0, dwFlags=0x0, pszPath=0x4f0058 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Pictures") returned 0x0 [0032.095] CoTaskMemFree (pv=0x4f0058) [0032.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e498, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f7e7c5a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f7e7c5a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f7e7c5a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f7e7c5a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.095] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0032.095] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc898 [0032.096] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.096] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.096] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc318 [0032.096] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.096] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.096] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.096] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.096] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.096] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.096] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.097] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.097] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.097] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.097] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.097] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.097] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.097] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.097] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.097] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.098] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0032.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f7e7c5a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f7e7c5a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f7e7c5a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f7e7c5a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.098] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0032.098] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc1d8 [0032.098] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.099] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0032.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.099] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc498 [0032.099] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.099] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.099] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.099] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.099] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.099] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.099] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.100] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.100] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.100] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.100] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.100] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.100] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.100] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.100] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.100] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.101] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0032.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f7e7c5a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f7e7c5a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f7e7c5a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f7e7c5a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.101] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0032.101] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc8d8 [0032.102] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.102] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.102] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc558 [0032.102] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.102] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.102] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.102] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.102] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.102] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.103] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.103] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.103] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.103] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.103] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.103] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.103] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.103] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.103] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.103] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.103] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", lpFilePart=0x0) returned 0x26 [0032.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.103] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\8yzc.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.104] GetFileType (hFile=0x2bc) returned 0x1 [0032.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.104] GetFileType (hFile=0x2bc) returned 0x1 [0032.104] GetFileSize (in: hFile=0x2bc, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0xbd11 [0032.104] ReadFile (in: hFile=0x2bc, lpBuffer=0x2048404, nNumberOfBytesToRead=0xbd11, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x2048404*, lpNumberOfBytesRead=0x33e984*=0xbd11, lpOverlapped=0x0) returned 1 [0032.104] CloseHandle (hObject=0x2bc) returned 1 [0032.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", lpFilePart=0x0) returned 0x2b [0032.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.106] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\8yzc.gif.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.106] GetFileType (hFile=0x2bc) returned 0x1 [0032.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.106] GetFileType (hFile=0x2bc) returned 0x1 [0032.106] WriteFile (in: hFile=0x2bc, lpBuffer=0x20546c4*, nNumberOfBytesToWrite=0xbd20, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20546c4*, lpNumberOfBytesWritten=0x33e974*=0xbd20, lpOverlapped=0x0) returned 1 [0032.107] CloseHandle (hObject=0x2bc) returned 1 [0032.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70770a5d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70770a5d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70770a5d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70770a5d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.108] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0032.109] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc618 [0032.109] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.109] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0032.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.109] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc4d8 [0032.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.110] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0032.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", lpFilePart=0x0) returned 0x26 [0032.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", lpFilePart=0x0) returned 0x26 [0032.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", lpFilePart=0x0) returned 0x26 [0032.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", lpFilePart=0x0) returned 0x26 [0032.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\8yzc.gif"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d0cf10, ftCreationTime.dwHighDateTime=0x1d35098, ftLastAccessTime.dwLowDateTime=0xb72028c0, ftLastAccessTime.dwHighDateTime=0x1d356af, ftLastWriteTime.dwLowDateTime=0xb72028c0, ftLastWriteTime.dwHighDateTime=0x1d356af, nFileSizeHigh=0x0, nFileSizeLow=0xbd11)) returned 1 [0032.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", lpFilePart=0x0) returned 0x26 [0032.111] GetFullPathNameW (in: lpFileName="8YzC.gif", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\8YzC.gif", lpFilePart=0x0) returned 0x25 [0032.111] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc898 [0032.111] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0032.111] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", lpFilePart=0x0) returned 0x26 [0032.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", lpFilePart=0x0) returned 0x26 [0032.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", lpFilePart=0x0) returned 0x26 [0032.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\8yzc.gif"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d0cf10, ftCreationTime.dwHighDateTime=0x1d35098, ftLastAccessTime.dwLowDateTime=0xb72028c0, ftLastAccessTime.dwHighDateTime=0x1d356af, ftLastWriteTime.dwLowDateTime=0xb72028c0, ftLastWriteTime.dwHighDateTime=0x1d356af, nFileSizeHigh=0x0, nFileSizeLow=0xbd11)) returned 1 [0032.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", lpFilePart=0x0) returned 0x26 [0032.111] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\8yzc.gif")) returned 1 [0032.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70770a5d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70770a5d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70770a5d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70770a5d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.113] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0032.113] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc298 [0032.113] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.113] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0032.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.113] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc798 [0032.113] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.113] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.113] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.113] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.114] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.114] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.114] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.114] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.114] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.114] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.114] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.114] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.114] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.114] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.114] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.114] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.114] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70770a5d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70770a5d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70770a5d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70770a5d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.115] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0032.115] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc358 [0032.115] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.115] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0032.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.115] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc618 [0032.115] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.116] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.116] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0032.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", lpFilePart=0x0) returned 0x31 [0032.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.117] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\97qmvfp-n9t7b4u.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.117] GetFileType (hFile=0x2bc) returned 0x1 [0032.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.117] GetFileType (hFile=0x2bc) returned 0x1 [0032.117] GetFileSize (in: hFile=0x2bc, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x1077c [0032.117] ReadFile (in: hFile=0x2bc, lpBuffer=0x206d704, nNumberOfBytesToRead=0x1077c, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x206d704*, lpNumberOfBytesRead=0x33e984*=0x1077c, lpOverlapped=0x0) returned 1 [0032.117] CloseHandle (hObject=0x2bc) returned 1 [0032.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png.Lime", lpFilePart=0x0) returned 0x36 [0032.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.119] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\97qmvfp-n9t7b4u.png.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.119] GetFileType (hFile=0x2bc) returned 0x1 [0032.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.119] GetFileType (hFile=0x2bc) returned 0x1 [0032.119] WriteFile (in: hFile=0x2bc, lpBuffer=0x207e438*, nNumberOfBytesToWrite=0x10780, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x207e438*, lpNumberOfBytesWritten=0x33e974*=0x10780, lpOverlapped=0x0) returned 1 [0032.120] CloseHandle (hObject=0x2bc) returned 1 [0032.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70796cc4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70796cc4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70796cc4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70796cc4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.122] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0032.122] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc798 [0032.122] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.122] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.122] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc558 [0032.122] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.122] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.122] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.122] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.122] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.122] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.122] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.122] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.122] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.122] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.122] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.122] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.123] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.123] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.123] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.123] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.123] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.123] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", lpFilePart=0x0) returned 0x31 [0032.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", lpFilePart=0x0) returned 0x31 [0032.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", lpFilePart=0x0) returned 0x31 [0032.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", lpFilePart=0x0) returned 0x31 [0032.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\97qmvfp-n9t7b4u.png"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef2e60, ftCreationTime.dwHighDateTime=0x1d34b87, ftLastAccessTime.dwLowDateTime=0x84b8b6a0, ftLastAccessTime.dwHighDateTime=0x1d35532, ftLastWriteTime.dwLowDateTime=0x84b8b6a0, ftLastWriteTime.dwHighDateTime=0x1d35532, nFileSizeHigh=0x0, nFileSizeLow=0x1077c)) returned 1 [0032.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", lpFilePart=0x0) returned 0x31 [0032.123] GetFullPathNameW (in: lpFileName="97QMvfP-n9T7b4U.png", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\97QMvfP-n9T7b4U.png", lpFilePart=0x0) returned 0x30 [0032.123] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc798 [0032.123] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0032.123] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", lpFilePart=0x0) returned 0x31 [0032.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", lpFilePart=0x0) returned 0x31 [0032.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", lpFilePart=0x0) returned 0x31 [0032.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\97qmvfp-n9t7b4u.png"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef2e60, ftCreationTime.dwHighDateTime=0x1d34b87, ftLastAccessTime.dwLowDateTime=0x84b8b6a0, ftLastAccessTime.dwHighDateTime=0x1d35532, ftLastWriteTime.dwLowDateTime=0x84b8b6a0, ftLastWriteTime.dwHighDateTime=0x1d35532, nFileSizeHigh=0x0, nFileSizeLow=0x1077c)) returned 1 [0032.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", lpFilePart=0x0) returned 0x31 [0032.124] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\97qmvfp-n9t7b4u.png")) returned 1 [0032.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70796cc4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70796cc4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70796cc4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70796cc4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.125] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0032.125] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc3d8 [0032.125] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.125] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.125] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc418 [0032.125] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.126] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.126] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0032.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70796cc4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70796cc4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70796cc4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70796cc4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.127] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0032.127] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc6d8 [0032.127] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.127] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0032.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.127] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc898 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.127] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.127] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", lpFilePart=0x0) returned 0x36 [0032.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.128] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\9pzhjofdzk0fqc8d56gx.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.128] GetFileType (hFile=0x2bc) returned 0x1 [0032.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.128] GetFileType (hFile=0x2bc) returned 0x1 [0032.128] GetFileSize (in: hFile=0x2bc, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x696e [0032.128] ReadFile (in: hFile=0x2bc, lpBuffer=0x209c1fc, nNumberOfBytesToRead=0x696e, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x209c1fc*, lpNumberOfBytesRead=0x33e984*=0x696e, lpOverlapped=0x0) returned 1 [0032.128] CloseHandle (hObject=0x2bc) returned 1 [0032.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp.Lime", lpFilePart=0x0) returned 0x3b [0032.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.129] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\9pzhjofdzk0fqc8d56gx.bmp.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.129] GetFileType (hFile=0x2bc) returned 0x1 [0032.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.129] GetFileType (hFile=0x2bc) returned 0x1 [0032.129] WriteFile (in: hFile=0x2bc, lpBuffer=0x20a312c*, nNumberOfBytesToWrite=0x6970, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20a312c*, lpNumberOfBytesWritten=0x33e974*=0x6970, lpOverlapped=0x0) returned 1 [0032.130] CloseHandle (hObject=0x2bc) returned 1 [0032.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70796cc4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70796cc4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70796cc4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70796cc4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.131] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0032.131] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc358 [0032.131] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.131] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0032.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.132] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc358 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.132] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.132] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0032.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", lpFilePart=0x0) returned 0x36 [0032.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", lpFilePart=0x0) returned 0x36 [0032.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", lpFilePart=0x0) returned 0x36 [0032.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", lpFilePart=0x0) returned 0x36 [0032.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\9pzhjofdzk0fqc8d56gx.bmp"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf769d20, ftCreationTime.dwHighDateTime=0x1d356d7, ftLastAccessTime.dwLowDateTime=0x8b1508f0, ftLastAccessTime.dwHighDateTime=0x1d354e2, ftLastWriteTime.dwLowDateTime=0x8b1508f0, ftLastWriteTime.dwHighDateTime=0x1d354e2, nFileSizeHigh=0x0, nFileSizeLow=0x696e)) returned 1 [0032.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", lpFilePart=0x0) returned 0x36 [0032.133] GetFullPathNameW (in: lpFileName="9pzHJofdZk0Fqc8d56gX.bmp", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\9pzHJofdZk0Fqc8d56gX.bmp", lpFilePart=0x0) returned 0x35 [0032.133] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc318 [0032.133] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0032.133] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0032.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", lpFilePart=0x0) returned 0x36 [0032.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", lpFilePart=0x0) returned 0x36 [0032.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", lpFilePart=0x0) returned 0x36 [0032.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\9pzhjofdzk0fqc8d56gx.bmp"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf769d20, ftCreationTime.dwHighDateTime=0x1d356d7, ftLastAccessTime.dwLowDateTime=0x8b1508f0, ftLastAccessTime.dwHighDateTime=0x1d354e2, ftLastWriteTime.dwLowDateTime=0x8b1508f0, ftLastWriteTime.dwHighDateTime=0x1d354e2, nFileSizeHigh=0x0, nFileSizeLow=0x696e)) returned 1 [0032.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", lpFilePart=0x0) returned 0x36 [0032.133] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\9pzhjofdzk0fqc8d56gx.bmp")) returned 1 [0032.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x707bcedf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x707bcedf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x707bcedf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x707bcedf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.135] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0032.135] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc8d8 [0032.135] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.135] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.135] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc658 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.135] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.135] FindClose (in: hFindFile=0x4dc658 | out: hFindFile=0x4dc658) returned 1 [0032.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x707bcedf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x707bcedf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x707bcedf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x707bcedf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.136] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0032.136] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc218 [0032.136] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.136] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0032.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.136] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc618 [0032.136] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.136] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.137] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.137] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.137] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.137] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.137] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.137] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.137] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.137] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.137] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.137] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.137] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.137] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.137] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.137] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.137] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0032.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png", lpFilePart=0x0) returned 0x35 [0032.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.137] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\auoxltyrvw31 biyhvn.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.137] GetFileType (hFile=0x2bc) returned 0x1 [0032.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.137] GetFileType (hFile=0x2bc) returned 0x1 [0032.137] GetFileSize (in: hFile=0x2bc, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0xb1fd [0032.137] ReadFile (in: hFile=0x2bc, lpBuffer=0x20b7270, nNumberOfBytesToRead=0xb1fd, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x20b7270*, lpNumberOfBytesRead=0x33e984*=0xb1fd, lpOverlapped=0x0) returned 1 [0032.138] CloseHandle (hObject=0x2bc) returned 1 [0032.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png.Lime", lpFilePart=0x0) returned 0x3a [0032.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.139] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\auoxltyrvw31 biyhvn.png.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.139] GetFileType (hFile=0x2bc) returned 0x1 [0032.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.139] GetFileType (hFile=0x2bc) returned 0x1 [0032.139] WriteFile (in: hFile=0x2bc, lpBuffer=0x20c2a30*, nNumberOfBytesToWrite=0xb200, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20c2a30*, lpNumberOfBytesWritten=0x33e974*=0xb200, lpOverlapped=0x0) returned 1 [0032.140] CloseHandle (hObject=0x2bc) returned 1 [0032.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x707bcedf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x707bcedf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x707bcedf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x707bcedf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.141] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0032.141] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc2d8 [0032.142] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.142] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0032.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.142] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc218 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.142] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.142] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0032.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png", lpFilePart=0x0) returned 0x35 [0032.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png", lpFilePart=0x0) returned 0x35 [0032.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png", lpFilePart=0x0) returned 0x35 [0032.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png", lpFilePart=0x0) returned 0x35 [0032.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\auoxltyrvw31 biyhvn.png"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x353f8970, ftCreationTime.dwHighDateTime=0x1d35328, ftLastAccessTime.dwLowDateTime=0xcdde4100, ftLastAccessTime.dwHighDateTime=0x1d35600, ftLastWriteTime.dwLowDateTime=0xcdde4100, ftLastWriteTime.dwHighDateTime=0x1d35600, nFileSizeHigh=0x0, nFileSizeLow=0xb1fd)) returned 1 [0032.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png", lpFilePart=0x0) returned 0x35 [0032.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.156] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc358 [0032.156] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.157] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc598 [0032.157] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.157] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.157] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.157] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.157] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.157] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.157] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.157] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.157] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.158] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.158] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0032.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\GhM3IdiNT.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\ghm3idint.gif"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4a754e0, ftCreationTime.dwHighDateTime=0x1d350c7, ftLastAccessTime.dwLowDateTime=0xeb7f3f50, ftLastAccessTime.dwHighDateTime=0x1d34d6f, ftLastWriteTime.dwLowDateTime=0xeb7f3f50, ftLastWriteTime.dwHighDateTime=0x1d34d6f, nFileSizeHigh=0x0, nFileSizeLow=0x1804d)) returned 1 [0032.159] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\GhM3IdiNT.gif", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc418 [0032.159] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0032.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\GhM3IdiNT.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\ghm3idint.gif"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4a754e0, ftCreationTime.dwHighDateTime=0x1d350c7, ftLastAccessTime.dwLowDateTime=0xeb7f3f50, ftLastAccessTime.dwHighDateTime=0x1d34d6f, ftLastWriteTime.dwLowDateTime=0xeb7f3f50, ftLastWriteTime.dwHighDateTime=0x1d34d6f, nFileSizeHigh=0x0, nFileSizeLow=0x1804d)) returned 1 [0032.159] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\GhM3IdiNT.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\ghm3idint.gif")) returned 1 [0032.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x707e3307, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x707e3307, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x707e3307, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x707e3307, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.161] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc298 [0032.161] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0032.161] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc8d8 [0032.162] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x707e3307, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x707e3307, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x707e3307, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x707e3307, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.163] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc4d8 [0032.163] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0032.163] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc218 [0032.165] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0032.165] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\hosHP.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\hoshp.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.165] GetFileType (hFile=0x2bc) returned 0x1 [0032.165] GetFileType (hFile=0x2bc) returned 0x1 [0032.165] GetFileSize (in: hFile=0x2bc, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x18404 [0032.165] ReadFile (in: hFile=0x2bc, lpBuffer=0x30ddcc0, nNumberOfBytesToRead=0x18404, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x30ddcc0*, lpNumberOfBytesRead=0x33e984*=0x18404, lpOverlapped=0x0) returned 1 [0032.166] CloseHandle (hObject=0x2bc) returned 1 [0032.169] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\hosHP.gif.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\hoshp.gif.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.169] GetFileType (hFile=0x2bc) returned 0x1 [0032.169] GetFileType (hFile=0x2bc) returned 0x1 [0032.169] WriteFile (in: hFile=0x2bc, lpBuffer=0x30f60e0*, nNumberOfBytesToWrite=0x18410, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x30f60e0*, lpNumberOfBytesWritten=0x33e974*=0x18410, lpOverlapped=0x0) returned 1 [0032.170] CloseHandle (hObject=0x2bc) returned 1 [0032.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7080933e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7080933e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7080933e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7080933e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.172] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc918 [0032.172] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0032.173] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc298 [0032.174] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0032.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\hosHP.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\hoshp.gif"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d562c0, ftCreationTime.dwHighDateTime=0x1d349c6, ftLastAccessTime.dwLowDateTime=0x8e032370, ftLastAccessTime.dwHighDateTime=0x1d35209, ftLastWriteTime.dwLowDateTime=0x8e032370, ftLastWriteTime.dwHighDateTime=0x1d35209, nFileSizeHigh=0x0, nFileSizeLow=0x18404)) returned 1 [0032.174] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\hosHP.gif", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc298 [0032.174] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0032.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\hosHP.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\hoshp.gif"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d562c0, ftCreationTime.dwHighDateTime=0x1d349c6, ftLastAccessTime.dwLowDateTime=0x8e032370, ftLastAccessTime.dwHighDateTime=0x1d35209, ftLastWriteTime.dwLowDateTime=0x8e032370, ftLastWriteTime.dwHighDateTime=0x1d35209, nFileSizeHigh=0x0, nFileSizeLow=0x18404)) returned 1 [0032.175] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\hosHP.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\hoshp.gif")) returned 1 [0032.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7080933e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7080933e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7080933e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7080933e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.177] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc8d8 [0032.177] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.177] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc598 [0032.178] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0032.178] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.179] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0032.184] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0032.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp.Lime", lpFilePart=0x0) returned 0x3e [0032.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.210] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\cn2.bmp.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.210] GetFileType (hFile=0x2bc) returned 0x1 [0032.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.210] GetFileType (hFile=0x2bc) returned 0x1 [0032.210] WriteFile (in: hFile=0x2bc, lpBuffer=0x220e104*, nNumberOfBytesToWrite=0x1620, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x220e104*, lpNumberOfBytesWritten=0x33e938*=0x1620, lpOverlapped=0x0) returned 1 [0032.211] CloseHandle (hObject=0x2bc) returned 1 [0032.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x7087bafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7087bafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x7087bafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7087bafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.212] GetFullPathNameW (in: lpFileName="bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x30 [0032.212] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc598 [0032.212] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.212] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0032.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", lpFilePart=0x0) returned 0x32 [0032.212] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc4d8 [0032.213] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.213] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.213] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.213] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.213] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.213] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.213] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.213] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.213] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.213] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.213] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.213] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0032.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", lpFilePart=0x0) returned 0x39 [0032.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", lpFilePart=0x0) returned 0x39 [0032.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", lpFilePart=0x0) returned 0x39 [0032.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", lpFilePart=0x0) returned 0x39 [0032.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\cn2.bmp"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32c749d0, ftCreationTime.dwHighDateTime=0x1d35030, ftLastAccessTime.dwLowDateTime=0x51b20310, ftLastAccessTime.dwHighDateTime=0x1d3509b, ftLastWriteTime.dwLowDateTime=0x51b20310, ftLastWriteTime.dwHighDateTime=0x1d3509b, nFileSizeHigh=0x0, nFileSizeLow=0x161d)) returned 1 [0032.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", lpFilePart=0x0) returned 0x39 [0032.214] GetFullPathNameW (in: lpFileName="cn2.bmp", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\cn2.bmp", lpFilePart=0x0) returned 0x24 [0032.214] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc3d8 [0032.214] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.214] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", lpFilePart=0x0) returned 0x39 [0032.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", lpFilePart=0x0) returned 0x39 [0032.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", lpFilePart=0x0) returned 0x39 [0032.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\cn2.bmp"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32c749d0, ftCreationTime.dwHighDateTime=0x1d35030, ftLastAccessTime.dwLowDateTime=0x51b20310, ftLastAccessTime.dwHighDateTime=0x1d3509b, ftLastWriteTime.dwLowDateTime=0x51b20310, ftLastWriteTime.dwHighDateTime=0x1d3509b, nFileSizeHigh=0x0, nFileSizeLow=0x161d)) returned 1 [0032.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", lpFilePart=0x0) returned 0x39 [0032.214] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\cn2.bmp")) returned 1 [0032.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x7087bafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7087bafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x7087bafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7087bafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.215] GetFullPathNameW (in: lpFileName="bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x30 [0032.215] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc3d8 [0032.216] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.216] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", lpFilePart=0x0) returned 0x32 [0032.216] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc418 [0032.216] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.216] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.216] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.216] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.216] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.216] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.216] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.216] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.216] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.217] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.217] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0032.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x7087bafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7087bafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x7087bafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7087bafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.217] GetFullPathNameW (in: lpFileName="bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x30 [0032.217] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc3d8 [0032.217] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.217] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", lpFilePart=0x0) returned 0x32 [0032.218] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc3d8 [0032.218] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.218] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.218] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.218] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.218] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.218] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.218] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.218] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.218] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.218] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.218] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", lpFilePart=0x0) returned 0x3e [0032.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0032.218] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\eemvu3dk.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.219] GetFileType (hFile=0x2bc) returned 0x1 [0032.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0032.219] GetFileType (hFile=0x2bc) returned 0x1 [0032.219] GetFileSize (in: hFile=0x2bc, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x603f [0032.219] ReadFile (in: hFile=0x2bc, lpBuffer=0x221cb44, nNumberOfBytesToRead=0x603f, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x221cb44*, lpNumberOfBytesRead=0x33e948*=0x603f, lpOverlapped=0x0) returned 1 [0032.219] CloseHandle (hObject=0x2bc) returned 1 [0032.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp.Lime", lpFilePart=0x0) returned 0x43 [0032.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.220] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\eemvu3dk.bmp.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.220] GetFileType (hFile=0x2bc) returned 0x1 [0032.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.220] GetFileType (hFile=0x2bc) returned 0x1 [0032.220] WriteFile (in: hFile=0x2bc, lpBuffer=0x2223154*, nNumberOfBytesToWrite=0x6040, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x2223154*, lpNumberOfBytesWritten=0x33e938*=0x6040, lpOverlapped=0x0) returned 1 [0032.221] CloseHandle (hObject=0x2bc) returned 1 [0032.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x7087bafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7087bafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x7087bafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7087bafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.222] GetFullPathNameW (in: lpFileName="bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x30 [0032.222] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc3d8 [0032.223] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.223] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", lpFilePart=0x0) returned 0x32 [0032.223] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc3d8 [0032.223] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.223] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.223] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.223] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.223] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.223] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.224] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.224] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.224] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.224] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.224] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.224] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", lpFilePart=0x0) returned 0x3e [0032.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", lpFilePart=0x0) returned 0x3e [0032.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", lpFilePart=0x0) returned 0x3e [0032.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", lpFilePart=0x0) returned 0x3e [0032.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\eemvu3dk.bmp"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5532890, ftCreationTime.dwHighDateTime=0x1d35907, ftLastAccessTime.dwLowDateTime=0xc5fe280, ftLastAccessTime.dwHighDateTime=0x1d3575a, ftLastWriteTime.dwLowDateTime=0xc5fe280, ftLastWriteTime.dwHighDateTime=0x1d3575a, nFileSizeHigh=0x0, nFileSizeLow=0x603f)) returned 1 [0032.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", lpFilePart=0x0) returned 0x3e [0032.224] GetFullPathNameW (in: lpFileName="eEmVU3Dk.bmp", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\eEmVU3Dk.bmp", lpFilePart=0x0) returned 0x29 [0032.224] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc3d8 [0032.225] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.225] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", lpFilePart=0x0) returned 0x3e [0032.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", lpFilePart=0x0) returned 0x3e [0032.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", lpFilePart=0x0) returned 0x3e [0032.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\eemvu3dk.bmp"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5532890, ftCreationTime.dwHighDateTime=0x1d35907, ftLastAccessTime.dwLowDateTime=0xc5fe280, ftLastAccessTime.dwHighDateTime=0x1d3575a, ftLastWriteTime.dwLowDateTime=0xc5fe280, ftLastWriteTime.dwHighDateTime=0x1d3575a, nFileSizeHigh=0x0, nFileSizeLow=0x603f)) returned 1 [0032.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", lpFilePart=0x0) returned 0x3e [0032.225] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\eemvu3dk.bmp")) returned 1 [0032.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x7087bafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7087bafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x7087bafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7087bafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.227] GetFullPathNameW (in: lpFileName="bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x30 [0032.227] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc3d8 [0032.227] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.227] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", lpFilePart=0x0) returned 0x32 [0032.227] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc3d8 [0032.227] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.227] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.227] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.227] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.227] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.228] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.228] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.228] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.228] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.228] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.228] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x7087bafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7087bafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x7087bafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7087bafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.229] GetFullPathNameW (in: lpFileName="bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x30 [0032.229] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc3d8 [0032.229] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.229] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", lpFilePart=0x0) returned 0x32 [0032.231] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc558 [0032.231] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.231] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.231] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.231] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.231] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.231] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.231] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.231] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.232] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.232] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.232] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", lpFilePart=0x0) returned 0x41 [0032.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0032.232] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\fnzhhkemnjg.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.232] GetFileType (hFile=0x2bc) returned 0x1 [0032.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0032.232] GetFileType (hFile=0x2bc) returned 0x1 [0032.232] GetFileSize (in: hFile=0x2bc, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x4df5 [0032.232] ReadFile (in: hFile=0x2bc, lpBuffer=0x2036aac, nNumberOfBytesToRead=0x4df5, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x2036aac*, lpNumberOfBytesRead=0x33e948*=0x4df5, lpOverlapped=0x0) returned 1 [0032.232] CloseHandle (hObject=0x2bc) returned 1 [0032.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif.Lime", lpFilePart=0x0) returned 0x46 [0032.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.233] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\fnzhhkemnjg.gif.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.233] GetFileType (hFile=0x2bc) returned 0x1 [0032.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.233] GetFileType (hFile=0x2bc) returned 0x1 [0032.233] WriteFile (in: hFile=0x2bc, lpBuffer=0x203be84*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x203be84*, lpNumberOfBytesWritten=0x33e938*=0x4e00, lpOverlapped=0x0) returned 1 [0032.234] CloseHandle (hObject=0x2bc) returned 1 [0032.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708a1ccd, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708a1ccd, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708a1ccd, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708a1ccd, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.235] GetFullPathNameW (in: lpFileName="bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x30 [0032.235] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc1d8 [0032.236] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.236] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0032.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", lpFilePart=0x0) returned 0x32 [0032.236] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc298 [0032.236] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.236] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.236] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.236] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.236] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.236] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.236] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.237] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.237] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.237] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.237] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.237] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0032.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", lpFilePart=0x0) returned 0x41 [0032.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", lpFilePart=0x0) returned 0x41 [0032.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", lpFilePart=0x0) returned 0x41 [0032.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", lpFilePart=0x0) returned 0x41 [0032.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\fnzhhkemnjg.gif"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc157c390, ftCreationTime.dwHighDateTime=0x1d3594b, ftLastAccessTime.dwLowDateTime=0x21344f80, ftLastAccessTime.dwHighDateTime=0x1d35574, ftLastWriteTime.dwLowDateTime=0x21344f80, ftLastWriteTime.dwHighDateTime=0x1d35574, nFileSizeHigh=0x0, nFileSizeLow=0x4df5)) returned 1 [0032.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", lpFilePart=0x0) returned 0x41 [0032.237] GetFullPathNameW (in: lpFileName="FnZhHkemnJG.gif", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\FnZhHkemnJG.gif", lpFilePart=0x0) returned 0x2c [0032.237] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc898 [0032.238] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.238] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", lpFilePart=0x0) returned 0x41 [0032.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", lpFilePart=0x0) returned 0x41 [0032.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", lpFilePart=0x0) returned 0x41 [0032.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\fnzhhkemnjg.gif"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc157c390, ftCreationTime.dwHighDateTime=0x1d3594b, ftLastAccessTime.dwLowDateTime=0x21344f80, ftLastAccessTime.dwHighDateTime=0x1d35574, ftLastWriteTime.dwLowDateTime=0x21344f80, ftLastWriteTime.dwHighDateTime=0x1d35574, nFileSizeHigh=0x0, nFileSizeLow=0x4df5)) returned 1 [0032.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", lpFilePart=0x0) returned 0x41 [0032.238] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\fnzhhkemnjg.gif")) returned 1 [0032.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708a1ccd, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708a1ccd, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708a1ccd, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708a1ccd, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.239] GetFullPathNameW (in: lpFileName="bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x30 [0032.239] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc658 [0032.239] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.240] FindClose (in: hFindFile=0x4dc658 | out: hFindFile=0x4dc658) returned 1 [0032.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", lpFilePart=0x0) returned 0x32 [0032.240] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc7d8 [0032.240] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.240] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.240] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.240] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.240] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.240] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.240] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.240] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.241] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.241] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.241] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708a1ccd, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708a1ccd, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708a1ccd, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708a1ccd, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.242] GetFullPathNameW (in: lpFileName="bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x30 [0032.242] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc658 [0032.242] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.242] FindClose (in: hFindFile=0x4dc658 | out: hFindFile=0x4dc658) returned 1 [0032.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", lpFilePart=0x0) returned 0x32 [0032.242] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc318 [0032.242] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.242] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.242] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.242] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.242] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.242] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.243] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.243] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.243] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.243] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.243] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0032.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", lpFilePart=0x0) returned 0x46 [0032.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0032.243] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\nr6dmjkjcntfscqr.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.243] GetFileType (hFile=0x2bc) returned 0x1 [0032.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0032.243] GetFileType (hFile=0x2bc) returned 0x1 [0032.243] GetFileSize (in: hFile=0x2bc, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0xdd61 [0032.243] ReadFile (in: hFile=0x2bc, lpBuffer=0x204e410, nNumberOfBytesToRead=0xdd61, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x204e410*, lpNumberOfBytesRead=0x33e948*=0xdd61, lpOverlapped=0x0) returned 1 [0032.244] CloseHandle (hObject=0x2bc) returned 1 [0032.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif.Lime", lpFilePart=0x0) returned 0x4b [0032.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.245] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\nr6dmjkjcntfscqr.gif.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.245] GetFileType (hFile=0x2bc) returned 0x1 [0032.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.245] GetFileType (hFile=0x2bc) returned 0x1 [0032.245] WriteFile (in: hFile=0x2bc, lpBuffer=0x205c760*, nNumberOfBytesToWrite=0xdd70, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x205c760*, lpNumberOfBytesWritten=0x33e938*=0xdd70, lpOverlapped=0x0) returned 1 [0032.246] CloseHandle (hObject=0x2bc) returned 1 [0032.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708c7f4e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708c7f4e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708c7f4e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708c7f4e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.248] GetFullPathNameW (in: lpFileName="bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x30 [0032.248] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc1d8 [0032.248] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.248] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0032.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", lpFilePart=0x0) returned 0x32 [0032.248] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc798 [0032.248] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.248] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.249] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.249] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.249] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.249] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.249] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.249] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.249] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.249] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.249] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.249] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", lpFilePart=0x0) returned 0x46 [0032.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", lpFilePart=0x0) returned 0x46 [0032.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", lpFilePart=0x0) returned 0x46 [0032.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", lpFilePart=0x0) returned 0x46 [0032.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\nr6dmjkjcntfscqr.gif"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91aac540, ftCreationTime.dwHighDateTime=0x1d34b93, ftLastAccessTime.dwLowDateTime=0x9bd569e0, ftLastAccessTime.dwHighDateTime=0x1d35173, ftLastWriteTime.dwLowDateTime=0x9bd569e0, ftLastWriteTime.dwHighDateTime=0x1d35173, nFileSizeHigh=0x0, nFileSizeLow=0xdd61)) returned 1 [0032.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", lpFilePart=0x0) returned 0x46 [0032.250] GetFullPathNameW (in: lpFileName="NR6dMjKJCnTfSCqR.gif", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\NR6dMjKJCnTfSCqR.gif", lpFilePart=0x0) returned 0x31 [0032.250] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc798 [0032.250] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.250] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", lpFilePart=0x0) returned 0x46 [0032.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", lpFilePart=0x0) returned 0x46 [0032.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", lpFilePart=0x0) returned 0x46 [0032.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\nr6dmjkjcntfscqr.gif"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91aac540, ftCreationTime.dwHighDateTime=0x1d34b93, ftLastAccessTime.dwLowDateTime=0x9bd569e0, ftLastAccessTime.dwHighDateTime=0x1d35173, ftLastWriteTime.dwLowDateTime=0x9bd569e0, ftLastWriteTime.dwHighDateTime=0x1d35173, nFileSizeHigh=0x0, nFileSizeLow=0xdd61)) returned 1 [0032.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", lpFilePart=0x0) returned 0x46 [0032.250] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\nr6dmjkjcntfscqr.gif")) returned 1 [0032.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708c7f4e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708c7f4e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708c7f4e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708c7f4e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.252] GetFullPathNameW (in: lpFileName="bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x30 [0032.252] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc898 [0032.252] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.252] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", lpFilePart=0x0) returned 0x32 [0032.252] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc458 [0032.252] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.252] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.253] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.253] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.253] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.253] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.253] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.253] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.253] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.253] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.253] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0032.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708c7f4e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708c7f4e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708c7f4e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708c7f4e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.254] GetFullPathNameW (in: lpFileName="bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x30 [0032.254] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc2d8 [0032.254] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.254] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0032.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", lpFilePart=0x0) returned 0x32 [0032.254] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc898 [0032.254] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.254] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.254] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.254] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.255] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.255] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.255] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.255] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.255] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.255] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.255] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", lpFilePart=0x0) returned 0x48 [0032.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0032.255] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\qkgeynbdljnjdcbmjb.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.255] GetFileType (hFile=0x2bc) returned 0x1 [0032.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0032.255] GetFileType (hFile=0x2bc) returned 0x1 [0032.255] GetFileSize (in: hFile=0x2bc, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0xb5db [0032.255] ReadFile (in: hFile=0x2bc, lpBuffer=0x2077dfc, nNumberOfBytesToRead=0xb5db, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x2077dfc*, lpNumberOfBytesRead=0x33e948*=0xb5db, lpOverlapped=0x0) returned 1 [0032.256] CloseHandle (hObject=0x2bc) returned 1 [0032.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif.Lime", lpFilePart=0x0) returned 0x4d [0032.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.257] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\qkgeynbdljnjdcbmjb.gif.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.257] GetFileType (hFile=0x2bc) returned 0x1 [0032.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.257] GetFileType (hFile=0x2bc) returned 0x1 [0032.257] WriteFile (in: hFile=0x2bc, lpBuffer=0x20839c0*, nNumberOfBytesToWrite=0xb5e0, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x20839c0*, lpNumberOfBytesWritten=0x33e938*=0xb5e0, lpOverlapped=0x0) returned 1 [0032.258] CloseHandle (hObject=0x2bc) returned 1 [0032.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708ee1d4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708ee1d4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708ee1d4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708ee1d4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.260] GetFullPathNameW (in: lpFileName="bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x30 [0032.260] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc798 [0032.260] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.260] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", lpFilePart=0x0) returned 0x32 [0032.260] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc458 [0032.260] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.260] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.260] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.260] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.260] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.261] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.261] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.261] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.261] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.261] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.261] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.261] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0032.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", lpFilePart=0x0) returned 0x48 [0032.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", lpFilePart=0x0) returned 0x48 [0032.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", lpFilePart=0x0) returned 0x48 [0032.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", lpFilePart=0x0) returned 0x48 [0032.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\qkgeynbdljnjdcbmjb.gif"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x196307c0, ftCreationTime.dwHighDateTime=0x1d34fe2, ftLastAccessTime.dwLowDateTime=0xdd7b22f0, ftLastAccessTime.dwHighDateTime=0x1d34c22, ftLastWriteTime.dwLowDateTime=0xdd7b22f0, ftLastWriteTime.dwHighDateTime=0x1d34c22, nFileSizeHigh=0x0, nFileSizeLow=0xb5db)) returned 1 [0032.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", lpFilePart=0x0) returned 0x48 [0032.261] GetFullPathNameW (in: lpFileName="qKgeyNbDLJNjdCbMJb.gif", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\qKgeyNbDLJNjdCbMJb.gif", lpFilePart=0x0) returned 0x33 [0032.261] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc2d8 [0032.261] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.262] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0032.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", lpFilePart=0x0) returned 0x48 [0032.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", lpFilePart=0x0) returned 0x48 [0032.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", lpFilePart=0x0) returned 0x48 [0032.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\qkgeynbdljnjdcbmjb.gif"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x196307c0, ftCreationTime.dwHighDateTime=0x1d34fe2, ftLastAccessTime.dwLowDateTime=0xdd7b22f0, ftLastAccessTime.dwHighDateTime=0x1d34c22, ftLastWriteTime.dwLowDateTime=0xdd7b22f0, ftLastWriteTime.dwHighDateTime=0x1d34c22, nFileSizeHigh=0x0, nFileSizeLow=0xb5db)) returned 1 [0032.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", lpFilePart=0x0) returned 0x48 [0032.262] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl\\qkgeynbdljnjdcbmjb.gif")) returned 1 [0032.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708ee1d4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708ee1d4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\bglkocslaas0zqepqxl"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3232640, ftCreationTime.dwHighDateTime=0x1d34f3c, ftLastAccessTime.dwLowDateTime=0x708ee1d4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708ee1d4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.263] GetFullPathNameW (in: lpFileName="bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x30 [0032.263] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc558 [0032.263] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.264] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0032.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\", lpFilePart=0x0) returned 0x32 [0032.264] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc1d8 [0032.264] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.264] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.264] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.264] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.264] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.264] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.264] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.264] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.264] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.264] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.264] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0032.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0032.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x708557fc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708557fc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x708557fc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708557fc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0032.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0032.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0032.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.282] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\B4tjiTd_NYk uV.bmp.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp\\b4tjitd_nyk uv.bmp.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.283] GetFileType (hFile=0x2bc) returned 0x1 [0032.283] GetFileType (hFile=0x2bc) returned 0x1 [0032.283] WriteFile (in: hFile=0x2bc, lpBuffer=0x31535c0*, nNumberOfBytesToWrite=0x18ec0, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x31535c0*, lpNumberOfBytesWritten=0x33e938*=0x18ec0, lpOverlapped=0x0) returned 1 [0032.284] CloseHandle (hObject=0x2bc) returned 1 [0032.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb57c8e0, ftCreationTime.dwHighDateTime=0x1d35029, ftLastAccessTime.dwLowDateTime=0x709145bc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709145bc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb57c8e0, ftCreationTime.dwHighDateTime=0x1d35029, ftLastAccessTime.dwLowDateTime=0x709145bc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709145bc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\B4tjiTd_NYk uV.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp\\b4tjitd_nyk uv.bmp"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed9c9f0, ftCreationTime.dwHighDateTime=0x1d359a8, ftLastAccessTime.dwLowDateTime=0x68755260, ftLastAccessTime.dwHighDateTime=0x1d352d4, ftLastWriteTime.dwLowDateTime=0x68755260, ftLastWriteTime.dwHighDateTime=0x1d352d4, nFileSizeHigh=0x0, nFileSizeLow=0x18eb9)) returned 1 [0032.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\B4tjiTd_NYk uV.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp\\b4tjitd_nyk uv.bmp"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed9c9f0, ftCreationTime.dwHighDateTime=0x1d359a8, ftLastAccessTime.dwLowDateTime=0x68755260, ftLastAccessTime.dwHighDateTime=0x1d352d4, ftLastWriteTime.dwLowDateTime=0x68755260, ftLastWriteTime.dwHighDateTime=0x1d352d4, nFileSizeHigh=0x0, nFileSizeLow=0x18eb9)) returned 1 [0032.287] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\B4tjiTd_NYk uV.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp\\b4tjitd_nyk uv.bmp")) returned 1 [0032.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb57c8e0, ftCreationTime.dwHighDateTime=0x1d35029, ftLastAccessTime.dwLowDateTime=0x7093a631, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7093a631, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb57c8e0, ftCreationTime.dwHighDateTime=0x1d35029, ftLastAccessTime.dwLowDateTime=0x7093a631, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7093a631, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb57c8e0, ftCreationTime.dwHighDateTime=0x1d35029, ftLastAccessTime.dwLowDateTime=0x7093a631, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7093a631, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb57c8e0, ftCreationTime.dwHighDateTime=0x1d35029, ftLastAccessTime.dwLowDateTime=0x7093a631, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7093a631, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.291] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\DC394OBjo9C.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp\\dc394objo9c.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.291] GetFileType (hFile=0x2bc) returned 0x1 [0032.291] GetFileType (hFile=0x2bc) returned 0x1 [0032.291] GetFileSize (in: hFile=0x2bc, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x8f88 [0032.291] ReadFile (in: hFile=0x2bc, lpBuffer=0x20da4e0, nNumberOfBytesToRead=0x8f88, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x20da4e0*, lpNumberOfBytesRead=0x33e948*=0x8f88, lpOverlapped=0x0) returned 1 [0032.292] CloseHandle (hObject=0x2bc) returned 1 [0032.293] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\DC394OBjo9C.bmp.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp\\dc394objo9c.bmp.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2bc [0032.293] GetFileType (hFile=0x2bc) returned 0x1 [0032.293] GetFileType (hFile=0x2bc) returned 0x1 [0032.293] WriteFile (in: hFile=0x2bc, lpBuffer=0x20e3a40*, nNumberOfBytesToWrite=0x8f90, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x20e3a40*, lpNumberOfBytesWritten=0x33e938*=0x8f90, lpOverlapped=0x0) returned 1 [0032.294] CloseHandle (hObject=0x2bc) returned 1 [0032.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb57c8e0, ftCreationTime.dwHighDateTime=0x1d35029, ftLastAccessTime.dwLowDateTime=0x7093a631, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7093a631, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb57c8e0, ftCreationTime.dwHighDateTime=0x1d35029, ftLastAccessTime.dwLowDateTime=0x7093a631, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7093a631, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\DC394OBjo9C.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp\\dc394objo9c.bmp"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c1c4f0, ftCreationTime.dwHighDateTime=0x1d34f01, ftLastAccessTime.dwLowDateTime=0x474b2420, ftLastAccessTime.dwHighDateTime=0x1d34f6e, ftLastWriteTime.dwLowDateTime=0x474b2420, ftLastWriteTime.dwHighDateTime=0x1d34f6e, nFileSizeHigh=0x0, nFileSizeLow=0x8f88)) returned 1 [0032.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\DC394OBjo9C.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp\\dc394objo9c.bmp"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c1c4f0, ftCreationTime.dwHighDateTime=0x1d34f01, ftLastAccessTime.dwLowDateTime=0x474b2420, ftLastAccessTime.dwHighDateTime=0x1d34f6e, ftLastWriteTime.dwLowDateTime=0x474b2420, ftLastWriteTime.dwHighDateTime=0x1d34f6e, nFileSizeHigh=0x0, nFileSizeLow=0x8f88)) returned 1 [0032.297] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\DC394OBjo9C.bmp" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp\\dc394objo9c.bmp")) returned 1 [0032.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb57c8e0, ftCreationTime.dwHighDateTime=0x1d35029, ftLastAccessTime.dwLowDateTime=0x7093a631, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7093a631, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\cglz_jmc_lob0ujffp"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb57c8e0, ftCreationTime.dwHighDateTime=0x1d35029, ftLastAccessTime.dwLowDateTime=0x7093a631, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7093a631, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.338] CoTaskMemAlloc (cb=0x20c) returned 0x4ecea0 [0032.338] SHGetFolderPathW (in: hwnd=0x0, csidl=13, hToken=0x0, dwFlags=0x0, pszPath=0x4ecea0 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Music") returned 0x0 [0032.339] CoTaskMemFree (pv=0x4ecea0) [0032.339] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc518 [0032.339] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.339] FindClose (in: hFindFile=0x4dc518 | out: hFindFile=0x4dc518) returned 1 [0032.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.339] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc2d8 [0032.339] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.339] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.340] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.340] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.340] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.340] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.340] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.340] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.340] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.340] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.340] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.340] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.340] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.340] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.340] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0032.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f6b697b, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f6b697b, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f6b697b, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f6b697b, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.341] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.341] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc6d8 [0032.341] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.341] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0032.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.341] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc6d8 [0032.342] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.342] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.342] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.342] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.342] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.342] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.342] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.342] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.342] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.342] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.342] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.342] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.342] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.342] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.343] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0032.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f6b697b, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f6b697b, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f6b697b, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f6b697b, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.343] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.343] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc558 [0032.343] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.343] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.344] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc2d8 [0032.344] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.344] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.344] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.344] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.344] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.344] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.344] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.344] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.344] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.344] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.344] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.345] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.345] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.345] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.345] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0032.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", lpFilePart=0x0) returned 0x2b [0032.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.345] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\c-56as7eiall.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.345] GetFileType (hFile=0x2c0) returned 0x1 [0032.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.345] GetFileType (hFile=0x2c0) returned 0x1 [0032.345] GetFileSize (in: hFile=0x2c0, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x61e2 [0032.345] ReadFile (in: hFile=0x2c0, lpBuffer=0x22229dc, nNumberOfBytesToRead=0x61e2, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x22229dc*, lpNumberOfBytesRead=0x33e984*=0x61e2, lpOverlapped=0x0) returned 1 [0032.346] CloseHandle (hObject=0x2c0) returned 1 [0032.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3.Lime", lpFilePart=0x0) returned 0x30 [0032.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.346] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\c-56as7eiall.mp3.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.347] GetFileType (hFile=0x2c0) returned 0x1 [0032.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.347] GetFileType (hFile=0x2c0) returned 0x1 [0032.347] WriteFile (in: hFile=0x2c0, lpBuffer=0x2229178*, nNumberOfBytesToWrite=0x61f0, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x2229178*, lpNumberOfBytesWritten=0x33e974*=0x61f0, lpOverlapped=0x0) returned 1 [0032.347] CloseHandle (hObject=0x2c0) returned 1 [0032.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709acd42, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709acd42, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709acd42, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709acd42, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.349] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.349] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc2d8 [0032.349] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.349] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0032.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.349] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc518 [0032.350] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.350] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.350] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.350] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.350] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.350] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.350] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.350] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.350] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.350] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.350] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.351] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.351] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.351] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.351] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.351] FindClose (in: hFindFile=0x4dc518 | out: hFindFile=0x4dc518) returned 1 [0032.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", lpFilePart=0x0) returned 0x2b [0032.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", lpFilePart=0x0) returned 0x2b [0032.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", lpFilePart=0x0) returned 0x2b [0032.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", lpFilePart=0x0) returned 0x2b [0032.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\c-56as7eiall.mp3"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75eb9c30, ftCreationTime.dwHighDateTime=0x1d3561a, ftLastAccessTime.dwLowDateTime=0xa8bf5380, ftLastAccessTime.dwHighDateTime=0x1d34bf8, ftLastWriteTime.dwLowDateTime=0xa8bf5380, ftLastWriteTime.dwHighDateTime=0x1d34bf8, nFileSizeHigh=0x0, nFileSizeLow=0x61e2)) returned 1 [0032.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", lpFilePart=0x0) returned 0x2b [0032.351] GetFullPathNameW (in: lpFileName="C-56aS7eiAlL.mp3", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\C-56aS7eiAlL.mp3", lpFilePart=0x0) returned 0x2d [0032.351] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc518 [0032.352] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0032.352] FindClose (in: hFindFile=0x4dc518 | out: hFindFile=0x4dc518) returned 1 [0032.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", lpFilePart=0x0) returned 0x2b [0032.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", lpFilePart=0x0) returned 0x2b [0032.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", lpFilePart=0x0) returned 0x2b [0032.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\c-56as7eiall.mp3"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75eb9c30, ftCreationTime.dwHighDateTime=0x1d3561a, ftLastAccessTime.dwLowDateTime=0xa8bf5380, ftLastAccessTime.dwHighDateTime=0x1d34bf8, ftLastWriteTime.dwLowDateTime=0xa8bf5380, ftLastWriteTime.dwHighDateTime=0x1d34bf8, nFileSizeHigh=0x0, nFileSizeLow=0x61e2)) returned 1 [0032.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3", lpFilePart=0x0) returned 0x2b [0032.352] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\c-56as7eiall.mp3")) returned 1 [0032.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709d2ff9, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709d2ff9, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709d2ff9, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709d2ff9, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.355] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.355] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc318 [0032.355] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.355] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0032.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.355] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc218 [0032.355] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.355] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.356] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.356] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.356] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.356] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.356] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.356] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.356] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.356] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.356] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.356] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.356] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.356] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.356] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0032.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709d2ff9, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709d2ff9, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709d2ff9, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709d2ff9, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.357] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.357] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc318 [0032.357] FindNextFileW (in: hFindFile=0x4dc318, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.357] FindClose (in: hFindFile=0x4dc318 | out: hFindFile=0x4dc318) returned 1 [0032.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.358] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc898 [0032.358] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.358] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.358] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.358] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.358] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.358] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.358] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.358] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.358] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.358] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.359] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.359] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.359] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.359] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.359] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", lpFilePart=0x0) returned 0x26 [0032.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.359] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini" (normalized: "c:\\users\\5jghkoaofdp\\music\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.359] GetFileType (hFile=0x2c0) returned 0x1 [0032.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.359] GetFileType (hFile=0x2c0) returned 0x1 [0032.359] GetFileSize (in: hFile=0x2c0, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x1f8 [0032.359] ReadFile (in: hFile=0x2c0, lpBuffer=0x203bec4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x203bec4*, lpNumberOfBytesRead=0x33e984*=0x1f8, lpOverlapped=0x0) returned 1 [0032.360] CloseHandle (hObject=0x2c0) returned 1 [0032.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2b [0032.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.360] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\desktop.ini.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.360] GetFileType (hFile=0x2c0) returned 0x1 [0032.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.360] GetFileType (hFile=0x2c0) returned 0x1 [0032.360] WriteFile (in: hFile=0x2c0, lpBuffer=0x203d784*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x203d784*, lpNumberOfBytesWritten=0x33e948*=0x200, lpOverlapped=0x0) returned 1 [0032.361] CloseHandle (hObject=0x2c0) returned 1 [0032.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709d2ff9, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709d2ff9, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709d2ff9, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709d2ff9, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.362] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.362] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc798 [0032.362] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.362] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.362] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc418 [0032.362] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.363] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.363] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.363] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.363] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.363] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.363] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.363] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.363] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.363] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.363] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.363] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.363] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.363] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.364] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.364] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0032.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", lpFilePart=0x0) returned 0x26 [0032.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", lpFilePart=0x0) returned 0x26 [0032.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", lpFilePart=0x0) returned 0x26 [0032.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", lpFilePart=0x0) returned 0x26 [0032.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini" (normalized: "c:\\users\\5jghkoaofdp\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe27a7d0, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xfe27a7d0, ftLastAccessTime.dwHighDateTime=0x1d2ced7, ftLastWriteTime.dwLowDateTime=0x53b637f3, ftLastWriteTime.dwHighDateTime=0x1d310a2, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0032.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", lpFilePart=0x0) returned 0x26 [0032.364] GetFullPathNameW (in: lpFileName="desktop.ini", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x28 [0032.364] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc2d8 [0032.364] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0032.364] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0032.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", lpFilePart=0x0) returned 0x26 [0032.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", lpFilePart=0x0) returned 0x26 [0032.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", lpFilePart=0x0) returned 0x26 [0032.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini" (normalized: "c:\\users\\5jghkoaofdp\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe27a7d0, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xfe27a7d0, ftLastAccessTime.dwHighDateTime=0x1d2ced7, ftLastWriteTime.dwLowDateTime=0x53b637f3, ftLastWriteTime.dwHighDateTime=0x1d310a2, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0032.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini", lpFilePart=0x0) returned 0x26 [0032.365] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini" (normalized: "c:\\users\\5jghkoaofdp\\music\\desktop.ini")) returned 1 [0032.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709d2ff9, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709d2ff9, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709d2ff9, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709d2ff9, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.366] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.366] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc6d8 [0032.366] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.366] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0032.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.366] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc498 [0032.366] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.366] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.367] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.367] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.367] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.367] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.367] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.367] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.367] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.367] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.367] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.367] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.367] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.367] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.367] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0032.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709d2ff9, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709d2ff9, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709d2ff9, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709d2ff9, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.368] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.368] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc7d8 [0032.368] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.368] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.368] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc918 [0032.368] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.369] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.369] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.369] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.369] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.369] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.369] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.369] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.369] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.369] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.369] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.369] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.369] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.369] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.369] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0032.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", lpFilePart=0x0) returned 0x2b [0032.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.369] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\gru-m3d0ihjq.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.369] GetFileType (hFile=0x2c0) returned 0x1 [0032.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.370] GetFileType (hFile=0x2c0) returned 0x1 [0032.370] GetFileSize (in: hFile=0x2c0, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x16462 [0032.370] ReadFile (in: hFile=0x2c0, lpBuffer=0x31c54a0, nNumberOfBytesToRead=0x16462, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x31c54a0*, lpNumberOfBytesRead=0x33e984*=0x16462, lpOverlapped=0x0) returned 1 [0032.370] CloseHandle (hObject=0x2c0) returned 1 [0032.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav.Lime", lpFilePart=0x0) returned 0x30 [0032.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.373] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\gru-m3d0ihjq.wav.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.373] GetFileType (hFile=0x2c0) returned 0x1 [0032.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.373] GetFileType (hFile=0x2c0) returned 0x1 [0032.373] WriteFile (in: hFile=0x2c0, lpBuffer=0x31db920*, nNumberOfBytesToWrite=0x16470, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x31db920*, lpNumberOfBytesWritten=0x33e974*=0x16470, lpOverlapped=0x0) returned 1 [0032.374] CloseHandle (hObject=0x2c0) returned 1 [0032.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709f9208, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709f9208, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709f9208, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709f9208, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.376] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.376] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc698 [0032.376] FindNextFileW (in: hFindFile=0x4dc698, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.377] FindClose (in: hFindFile=0x4dc698 | out: hFindFile=0x4dc698) returned 1 [0032.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.377] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc898 [0032.377] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.377] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.377] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.377] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.377] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.377] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.377] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.377] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.377] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.377] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.377] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.378] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.378] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.378] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.378] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.378] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", lpFilePart=0x0) returned 0x2b [0032.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", lpFilePart=0x0) returned 0x2b [0032.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", lpFilePart=0x0) returned 0x2b [0032.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", lpFilePart=0x0) returned 0x2b [0032.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\gru-m3d0ihjq.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb1b0960, ftCreationTime.dwHighDateTime=0x1d35034, ftLastAccessTime.dwLowDateTime=0x2a0fe6d0, ftLastAccessTime.dwHighDateTime=0x1d34d1a, ftLastWriteTime.dwLowDateTime=0x2a0fe6d0, ftLastWriteTime.dwHighDateTime=0x1d34d1a, nFileSizeHigh=0x0, nFileSizeLow=0x16462)) returned 1 [0032.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", lpFilePart=0x0) returned 0x2b [0032.378] GetFullPathNameW (in: lpFileName="GrU-M3D0ihjQ.wav", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\GrU-M3D0ihjQ.wav", lpFilePart=0x0) returned 0x2d [0032.378] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc498 [0032.378] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0032.378] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0032.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", lpFilePart=0x0) returned 0x2b [0032.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", lpFilePart=0x0) returned 0x2b [0032.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", lpFilePart=0x0) returned 0x2b [0032.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\gru-m3d0ihjq.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb1b0960, ftCreationTime.dwHighDateTime=0x1d35034, ftLastAccessTime.dwLowDateTime=0x2a0fe6d0, ftLastAccessTime.dwHighDateTime=0x1d34d1a, ftLastWriteTime.dwLowDateTime=0x2a0fe6d0, ftLastWriteTime.dwHighDateTime=0x1d34d1a, nFileSizeHigh=0x0, nFileSizeLow=0x16462)) returned 1 [0032.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav", lpFilePart=0x0) returned 0x2b [0032.379] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\gru-m3d0ihjq.wav")) returned 1 [0032.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709f9208, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709f9208, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709f9208, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709f9208, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.380] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.380] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc8d8 [0032.380] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.380] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.381] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc898 [0032.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.381] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.381] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709f9208, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709f9208, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x709f9208, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x709f9208, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.383] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.383] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc4d8 [0032.383] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.383] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0032.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.383] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc498 [0032.383] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.383] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.383] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.383] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.383] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.384] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.384] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.384] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.384] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.384] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.384] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.384] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.384] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.384] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.384] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0032.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", lpFilePart=0x0) returned 0x25 [0032.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.385] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\od32to.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.385] GetFileType (hFile=0x2c0) returned 0x1 [0032.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.385] GetFileType (hFile=0x2c0) returned 0x1 [0032.385] GetFileSize (in: hFile=0x2c0, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x483f [0032.385] ReadFile (in: hFile=0x2c0, lpBuffer=0x2057000, nNumberOfBytesToRead=0x483f, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x2057000*, lpNumberOfBytesRead=0x33e984*=0x483f, lpOverlapped=0x0) returned 1 [0032.385] CloseHandle (hObject=0x2c0) returned 1 [0032.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3.Lime", lpFilePart=0x0) returned 0x2a [0032.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.386] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\od32to.mp3.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.386] GetFileType (hFile=0x2c0) returned 0x1 [0032.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.386] GetFileType (hFile=0x2c0) returned 0x1 [0032.386] WriteFile (in: hFile=0x2c0, lpBuffer=0x205bde0*, nNumberOfBytesToWrite=0x4840, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x205bde0*, lpNumberOfBytesWritten=0x33e974*=0x4840, lpOverlapped=0x0) returned 1 [0032.387] CloseHandle (hObject=0x2c0) returned 1 [0032.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70a1f591, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70a1f591, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70a1f591, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70a1f591, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.388] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.388] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc298 [0032.388] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.388] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0032.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.389] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc618 [0032.389] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.389] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.389] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.389] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.389] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.389] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.389] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.389] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.389] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.389] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.389] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.390] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.390] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.390] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.390] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.390] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0032.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", lpFilePart=0x0) returned 0x25 [0032.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", lpFilePart=0x0) returned 0x25 [0032.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", lpFilePart=0x0) returned 0x25 [0032.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", lpFilePart=0x0) returned 0x25 [0032.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\od32to.mp3"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24f8ce0, ftCreationTime.dwHighDateTime=0x1d34afa, ftLastAccessTime.dwLowDateTime=0xaec097c0, ftLastAccessTime.dwHighDateTime=0x1d356d0, ftLastWriteTime.dwLowDateTime=0xaec097c0, ftLastWriteTime.dwHighDateTime=0x1d356d0, nFileSizeHigh=0x0, nFileSizeLow=0x483f)) returned 1 [0032.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", lpFilePart=0x0) returned 0x25 [0032.390] GetFullPathNameW (in: lpFileName="Od32To.mp3", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Od32To.mp3", lpFilePart=0x0) returned 0x27 [0032.390] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc358 [0032.390] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0032.391] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0032.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", lpFilePart=0x0) returned 0x25 [0032.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", lpFilePart=0x0) returned 0x25 [0032.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", lpFilePart=0x0) returned 0x25 [0032.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\od32to.mp3"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24f8ce0, ftCreationTime.dwHighDateTime=0x1d34afa, ftLastAccessTime.dwLowDateTime=0xaec097c0, ftLastAccessTime.dwHighDateTime=0x1d356d0, ftLastWriteTime.dwLowDateTime=0xaec097c0, ftLastWriteTime.dwHighDateTime=0x1d356d0, nFileSizeHigh=0x0, nFileSizeLow=0x483f)) returned 1 [0032.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3", lpFilePart=0x0) returned 0x25 [0032.391] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\od32to.mp3")) returned 1 [0032.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70a1f591, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70a1f591, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70a1f591, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70a1f591, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.392] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.392] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc898 [0032.392] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.392] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.393] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc6d8 [0032.393] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.393] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.393] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.393] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.393] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.393] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.393] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.393] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.393] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.393] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.393] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.393] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.394] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.394] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.394] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0032.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70a1f591, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70a1f591, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70a1f591, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70a1f591, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.394] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.394] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc798 [0032.395] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.395] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.395] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc418 [0032.395] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.395] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.395] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.395] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.395] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.395] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.395] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.395] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.396] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.396] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.396] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.396] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.396] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.396] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.396] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0032.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Q0Ua0AHEpDpsIaUeq0.mp3", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Q0Ua0AHEpDpsIaUeq0.mp3", lpFilePart=0x0) returned 0x31 [0032.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.396] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Q0Ua0AHEpDpsIaUeq0.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\q0ua0ahepdpsiaueq0.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.396] GetFileType (hFile=0x2c0) returned 0x1 [0032.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.396] GetFileType (hFile=0x2c0) returned 0x1 [0032.396] GetFileSize (in: hFile=0x2c0, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x8455 [0032.396] ReadFile (in: hFile=0x2c0, lpBuffer=0x206c840, nNumberOfBytesToRead=0x8455, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x206c840*, lpNumberOfBytesRead=0x33e984*=0x8455, lpOverlapped=0x0) returned 1 [0032.397] CloseHandle (hObject=0x2c0) returned 1 [0032.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Q0Ua0AHEpDpsIaUeq0.mp3.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Q0Ua0AHEpDpsIaUeq0.mp3.Lime", lpFilePart=0x0) returned 0x36 [0032.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.398] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Q0Ua0AHEpDpsIaUeq0.mp3.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\q0ua0ahepdpsiaueq0.mp3.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.398] GetFileType (hFile=0x2c0) returned 0x1 [0032.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.398] GetFileType (hFile=0x2c0) returned 0x1 [0032.398] WriteFile (in: hFile=0x2c0, lpBuffer=0x2075258*, nNumberOfBytesToWrite=0x8460, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x2075258*, lpNumberOfBytesWritten=0x33e974*=0x8460, lpOverlapped=0x0) returned 1 [0032.399] CloseHandle (hObject=0x2c0) returned 1 [0032.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70a4570c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70a4570c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music" (normalized: "c:\\users\\5jghkoaofdp\\music"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70a4570c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70a4570c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.401] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Music", lpFilePart=0x0) returned 0x22 [0032.401] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc898 [0032.401] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.401] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0032.401] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc418 [0032.401] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.401] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.401] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.401] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.401] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.401] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.402] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.402] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.402] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.402] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.402] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.402] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.402] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.402] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.402] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.402] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0032.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Q0Ua0AHEpDpsIaUeq0.mp3", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Q0Ua0AHEpDpsIaUeq0.mp3", lpFilePart=0x0) returned 0x31 [0032.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Q0Ua0AHEpDpsIaUeq0.mp3", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Q0Ua0AHEpDpsIaUeq0.mp3", lpFilePart=0x0) returned 0x31 [0032.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Q0Ua0AHEpDpsIaUeq0.mp3", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Q0Ua0AHEpDpsIaUeq0.mp3", lpFilePart=0x0) returned 0x31 [0032.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.404] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0032.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.405] FindClose (in: hFindFile=0x4dc698 | out: hFindFile=0x4dc698) returned 1 [0032.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.406] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.407] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.457] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\ittEW9VaXDBQ.m4a.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe\\ittew9vaxdbq.m4a.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.494] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc518 [0032.494] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.494] FindClose (in: hFindFile=0x4dc518 | out: hFindFile=0x4dc518) returned 1 [0032.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.495] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc8d8 [0032.495] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.495] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.495] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.495] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.495] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.495] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.495] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.495] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.496] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.496] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.496] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.496] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.496] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.496] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.496] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.496] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", lpFilePart=0x0) returned 0x2e [0032.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", lpFilePart=0x0) returned 0x2e [0032.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", lpFilePart=0x0) returned 0x2e [0032.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", lpFilePart=0x0) returned 0x2e [0032.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\eqrsjs.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5bd8820, ftCreationTime.dwHighDateTime=0x1d35686, ftLastAccessTime.dwLowDateTime=0x46d9e2c0, ftLastAccessTime.dwHighDateTime=0x1d34fd1, ftLastWriteTime.dwLowDateTime=0x46d9e2c0, ftLastWriteTime.dwHighDateTime=0x1d34fd1, nFileSizeHigh=0x0, nFileSizeLow=0x15386)) returned 1 [0032.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", lpFilePart=0x0) returned 0x2e [0032.497] GetFullPathNameW (in: lpFileName="EQRSjs.wav", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\EQRSjs.wav", lpFilePart=0x0) returned 0x27 [0032.497] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc8d8 [0032.497] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.497] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", lpFilePart=0x0) returned 0x2e [0032.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", lpFilePart=0x0) returned 0x2e [0032.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", lpFilePart=0x0) returned 0x2e [0032.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\eqrsjs.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5bd8820, ftCreationTime.dwHighDateTime=0x1d35686, ftLastAccessTime.dwLowDateTime=0x46d9e2c0, ftLastAccessTime.dwHighDateTime=0x1d34fd1, ftLastWriteTime.dwLowDateTime=0x46d9e2c0, ftLastWriteTime.dwHighDateTime=0x1d34fd1, nFileSizeHigh=0x0, nFileSizeLow=0x15386)) returned 1 [0032.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav", lpFilePart=0x0) returned 0x2e [0032.497] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\EQRSjs.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\eqrsjs.wav")) returned 1 [0032.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b2a594, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b2a594, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b2a594, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b2a594, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.499] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.499] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc8d8 [0032.500] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.500] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.500] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc358 [0032.500] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.500] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.500] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.500] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.500] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.500] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.501] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.501] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.501] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.501] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.501] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.501] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.501] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.501] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.501] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0032.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b2a594, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b2a594, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b2a594, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b2a594, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.502] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.502] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc4d8 [0032.502] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.502] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0032.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.502] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc2d8 [0032.503] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.503] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.503] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.503] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.503] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.503] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.503] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.503] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.503] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.503] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.503] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.503] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.504] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.504] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.504] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0032.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", lpFilePart=0x0) returned 0x2c [0032.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0032.504] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\ggnh.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.504] GetFileType (hFile=0x2c0) returned 0x1 [0032.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0032.504] GetFileType (hFile=0x2c0) returned 0x1 [0032.504] GetFileSize (in: hFile=0x2c0, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x12e9 [0032.504] ReadFile (in: hFile=0x2c0, lpBuffer=0x20cf234, nNumberOfBytesToRead=0x12e9, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x20cf234*, lpNumberOfBytesRead=0x33e948*=0x12e9, lpOverlapped=0x0) returned 1 [0032.504] CloseHandle (hObject=0x2c0) returned 1 [0032.505] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a.Lime", lpFilePart=0x0) returned 0x31 [0032.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.505] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\ggnh.m4a.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.505] GetFileType (hFile=0x2c0) returned 0x1 [0032.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.505] GetFileType (hFile=0x2c0) returned 0x1 [0032.505] WriteFile (in: hFile=0x2c0, lpBuffer=0x20d0ad0*, nNumberOfBytesToWrite=0x12f0, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x20d0ad0*, lpNumberOfBytesWritten=0x33e938*=0x12f0, lpOverlapped=0x0) returned 1 [0032.506] CloseHandle (hObject=0x2c0) returned 1 [0032.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b2a594, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b2a594, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b2a594, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b2a594, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.507] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.507] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc2d8 [0032.507] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.507] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0032.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.507] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc558 [0032.508] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.508] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.508] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.508] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.508] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.508] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.508] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.508] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.508] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.508] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.508] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.508] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.509] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.509] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.509] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.509] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", lpFilePart=0x0) returned 0x2c [0032.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", lpFilePart=0x0) returned 0x2c [0032.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", lpFilePart=0x0) returned 0x2c [0032.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", lpFilePart=0x0) returned 0x2c [0032.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\ggnh.m4a"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf0bf2d0, ftCreationTime.dwHighDateTime=0x1d359f6, ftLastAccessTime.dwLowDateTime=0x4b94ac0, ftLastAccessTime.dwHighDateTime=0x1d349a5, ftLastWriteTime.dwLowDateTime=0x4b94ac0, ftLastWriteTime.dwHighDateTime=0x1d349a5, nFileSizeHigh=0x0, nFileSizeLow=0x12e9)) returned 1 [0032.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", lpFilePart=0x0) returned 0x2c [0032.509] GetFullPathNameW (in: lpFileName="GGnH.m4a", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\GGnH.m4a", lpFilePart=0x0) returned 0x25 [0032.509] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc558 [0032.509] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.509] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", lpFilePart=0x0) returned 0x2c [0032.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", lpFilePart=0x0) returned 0x2c [0032.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", lpFilePart=0x0) returned 0x2c [0032.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\ggnh.m4a"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf0bf2d0, ftCreationTime.dwHighDateTime=0x1d359f6, ftLastAccessTime.dwLowDateTime=0x4b94ac0, ftLastAccessTime.dwHighDateTime=0x1d349a5, ftLastWriteTime.dwLowDateTime=0x4b94ac0, ftLastWriteTime.dwHighDateTime=0x1d349a5, nFileSizeHigh=0x0, nFileSizeLow=0x12e9)) returned 1 [0032.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a", lpFilePart=0x0) returned 0x2c [0032.510] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\GGnH.m4a" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\ggnh.m4a")) returned 1 [0032.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b507ac, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b507ac, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b507ac, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b507ac, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.511] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.511] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc7d8 [0032.511] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.511] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.511] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc7d8 [0032.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.512] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.513] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.513] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.513] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b507ac, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b507ac, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b507ac, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b507ac, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.513] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.513] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc7d8 [0032.514] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.514] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.514] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc458 [0032.514] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.514] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.514] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.514] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.514] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.514] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.514] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.515] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.515] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.515] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.515] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.515] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.515] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.515] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.515] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0032.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", lpFilePart=0x0) returned 0x3b [0032.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0032.515] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\gqfyfnbufhd0b2hnpcm.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.515] GetFileType (hFile=0x2c0) returned 0x1 [0032.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0032.515] GetFileType (hFile=0x2c0) returned 0x1 [0032.515] GetFileSize (in: hFile=0x2c0, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x15297 [0032.516] ReadFile (in: hFile=0x2c0, lpBuffer=0x32cb588, nNumberOfBytesToRead=0x15297, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x32cb588*, lpNumberOfBytesRead=0x33e948*=0x15297, lpOverlapped=0x0) returned 1 [0032.516] CloseHandle (hObject=0x2c0) returned 1 [0032.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav.Lime", lpFilePart=0x0) returned 0x40 [0032.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.519] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\gqfyfnbufhd0b2hnpcm.wav.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.519] GetFileType (hFile=0x2c0) returned 0x1 [0032.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.519] GetFileType (hFile=0x2c0) returned 0x1 [0032.519] WriteFile (in: hFile=0x2c0, lpBuffer=0x32e0840*, nNumberOfBytesToWrite=0x152a0, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x32e0840*, lpNumberOfBytesWritten=0x33e938*=0x152a0, lpOverlapped=0x0) returned 1 [0032.521] CloseHandle (hObject=0x2c0) returned 1 [0032.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b507ac, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b507ac, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b507ac, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b507ac, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.523] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.523] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc218 [0032.523] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.523] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0032.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.523] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc458 [0032.523] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.524] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.524] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.524] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.524] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.524] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.524] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.524] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.524] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.524] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.524] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.524] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.524] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.524] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.524] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.525] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0032.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", lpFilePart=0x0) returned 0x3b [0032.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", lpFilePart=0x0) returned 0x3b [0032.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", lpFilePart=0x0) returned 0x3b [0032.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", lpFilePart=0x0) returned 0x3b [0032.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\gqfyfnbufhd0b2hnpcm.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfedaa980, ftCreationTime.dwHighDateTime=0x1d35982, ftLastAccessTime.dwLowDateTime=0xf209ef10, ftLastAccessTime.dwHighDateTime=0x1d356ab, ftLastWriteTime.dwLowDateTime=0xf209ef10, ftLastWriteTime.dwHighDateTime=0x1d356ab, nFileSizeHigh=0x0, nFileSizeLow=0x15297)) returned 1 [0032.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", lpFilePart=0x0) returned 0x3b [0032.525] GetFullPathNameW (in: lpFileName="gQfYFnBUFHd0b2hNpcm.wav", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\gQfYFnBUFHd0b2hNpcm.wav", lpFilePart=0x0) returned 0x34 [0032.525] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc658 [0032.525] FindNextFileW (in: hFindFile=0x4dc658, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.525] FindClose (in: hFindFile=0x4dc658 | out: hFindFile=0x4dc658) returned 1 [0032.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", lpFilePart=0x0) returned 0x3b [0032.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", lpFilePart=0x0) returned 0x3b [0032.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", lpFilePart=0x0) returned 0x3b [0032.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\gqfyfnbufhd0b2hnpcm.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfedaa980, ftCreationTime.dwHighDateTime=0x1d35982, ftLastAccessTime.dwLowDateTime=0xf209ef10, ftLastAccessTime.dwHighDateTime=0x1d356ab, ftLastWriteTime.dwLowDateTime=0xf209ef10, ftLastWriteTime.dwHighDateTime=0x1d356ab, nFileSizeHigh=0x0, nFileSizeLow=0x15297)) returned 1 [0032.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav", lpFilePart=0x0) returned 0x3b [0032.526] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gQfYFnBUFHd0b2hNpcm.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\gqfyfnbufhd0b2hnpcm.wav")) returned 1 [0032.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b76a7f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b76a7f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b76a7f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b76a7f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.527] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.527] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc8d8 [0032.527] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.527] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.528] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc8d8 [0032.528] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.528] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.528] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.528] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.528] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.528] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.528] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.528] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.528] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.528] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.528] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.529] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.529] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.529] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.529] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b76a7f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b76a7f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b76a7f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b76a7f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.530] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.530] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc4d8 [0032.530] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.530] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0032.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.530] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc7d8 [0032.530] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.530] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.530] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.530] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.530] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.531] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.531] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.531] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.531] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.531] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.531] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.531] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.531] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.531] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.531] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", lpFilePart=0x0) returned 0x31 [0032.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0032.531] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\gwcyviwii.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.531] GetFileType (hFile=0x2c0) returned 0x1 [0032.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0032.531] GetFileType (hFile=0x2c0) returned 0x1 [0032.531] GetFileSize (in: hFile=0x2c0, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x7ea3 [0032.532] ReadFile (in: hFile=0x2c0, lpBuffer=0x20ecc58, nNumberOfBytesToRead=0x7ea3, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x20ecc58*, lpNumberOfBytesRead=0x33e948*=0x7ea3, lpOverlapped=0x0) returned 1 [0032.532] CloseHandle (hObject=0x2c0) returned 1 [0032.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3.Lime", lpFilePart=0x0) returned 0x36 [0032.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.533] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\gwcyviwii.mp3.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.533] GetFileType (hFile=0x2c0) returned 0x1 [0032.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.533] GetFileType (hFile=0x2c0) returned 0x1 [0032.533] WriteFile (in: hFile=0x2c0, lpBuffer=0x20f50c0*, nNumberOfBytesToWrite=0x7eb0, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x20f50c0*, lpNumberOfBytesWritten=0x33e938*=0x7eb0, lpOverlapped=0x0) returned 1 [0032.534] CloseHandle (hObject=0x2c0) returned 1 [0032.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b76a7f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b76a7f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b76a7f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b76a7f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.535] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.536] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc3d8 [0032.536] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.536] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.536] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc358 [0032.536] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.536] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.536] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.536] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.536] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.536] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.537] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.537] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.537] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.537] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.537] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.537] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.537] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.537] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.537] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.537] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0032.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", lpFilePart=0x0) returned 0x31 [0032.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", lpFilePart=0x0) returned 0x31 [0032.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", lpFilePart=0x0) returned 0x31 [0032.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", lpFilePart=0x0) returned 0x31 [0032.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\gwcyviwii.mp3"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fd9eba0, ftCreationTime.dwHighDateTime=0x1d358fb, ftLastAccessTime.dwLowDateTime=0xb3bf0090, ftLastAccessTime.dwHighDateTime=0x1d34f55, ftLastWriteTime.dwLowDateTime=0xb3bf0090, ftLastWriteTime.dwHighDateTime=0x1d34f55, nFileSizeHigh=0x0, nFileSizeLow=0x7ea3)) returned 1 [0032.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", lpFilePart=0x0) returned 0x31 [0032.538] GetFullPathNameW (in: lpFileName="gWCYViWIi.mp3", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\gWCYViWIi.mp3", lpFilePart=0x0) returned 0x2a [0032.538] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc498 [0032.538] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.538] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0032.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", lpFilePart=0x0) returned 0x31 [0032.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", lpFilePart=0x0) returned 0x31 [0032.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", lpFilePart=0x0) returned 0x31 [0032.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\gwcyviwii.mp3"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fd9eba0, ftCreationTime.dwHighDateTime=0x1d358fb, ftLastAccessTime.dwLowDateTime=0xb3bf0090, ftLastAccessTime.dwHighDateTime=0x1d34f55, ftLastWriteTime.dwLowDateTime=0xb3bf0090, ftLastWriteTime.dwHighDateTime=0x1d34f55, nFileSizeHigh=0x0, nFileSizeLow=0x7ea3)) returned 1 [0032.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3", lpFilePart=0x0) returned 0x31 [0032.539] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\gWCYViWIi.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\gwcyviwii.mp3")) returned 1 [0032.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b9cbe1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b9cbe1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b9cbe1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b9cbe1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.540] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.540] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc7d8 [0032.540] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.540] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.540] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc918 [0032.541] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.541] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.541] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.541] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.541] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.541] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.541] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.541] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.541] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.541] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.541] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.541] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.541] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.541] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.541] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0032.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b9cbe1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b9cbe1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b9cbe1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b9cbe1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.542] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.542] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc918 [0032.542] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.542] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0032.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.542] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc298 [0032.542] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.542] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.542] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.542] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.542] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.543] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.543] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.543] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.543] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.543] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.543] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.543] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.543] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.543] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.543] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0032.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", lpFilePart=0x0) returned 0x2c [0032.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0032.543] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\kz2m.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.543] GetFileType (hFile=0x2c0) returned 0x1 [0032.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0032.543] GetFileType (hFile=0x2c0) returned 0x1 [0032.543] GetFileSize (in: hFile=0x2c0, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x14694 [0032.543] ReadFile (in: hFile=0x2c0, lpBuffer=0x210a3dc, nNumberOfBytesToRead=0x14694, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x210a3dc*, lpNumberOfBytesRead=0x33e948*=0x14694, lpOverlapped=0x0) returned 1 [0032.544] CloseHandle (hObject=0x2c0) returned 1 [0032.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3.Lime", lpFilePart=0x0) returned 0x31 [0032.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.546] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\kz2m.mp3.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.546] GetFileType (hFile=0x2c0) returned 0x1 [0032.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.546] GetFileType (hFile=0x2c0) returned 0x1 [0032.546] WriteFile (in: hFile=0x2c0, lpBuffer=0x211f024*, nNumberOfBytesToWrite=0x146a0, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x211f024*, lpNumberOfBytesWritten=0x33e938*=0x146a0, lpOverlapped=0x0) returned 1 [0032.547] CloseHandle (hObject=0x2c0) returned 1 [0032.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b9cbe1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b9cbe1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b9cbe1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b9cbe1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.549] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.549] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc618 [0032.549] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.550] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0032.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.550] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc918 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.550] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.550] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0032.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", lpFilePart=0x0) returned 0x2c [0032.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", lpFilePart=0x0) returned 0x2c [0032.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", lpFilePart=0x0) returned 0x2c [0032.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", lpFilePart=0x0) returned 0x2c [0032.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\kz2m.mp3"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb93b6650, ftCreationTime.dwHighDateTime=0x1d3581d, ftLastAccessTime.dwLowDateTime=0xc4c32bd0, ftLastAccessTime.dwHighDateTime=0x1d34be7, ftLastWriteTime.dwLowDateTime=0xc4c32bd0, ftLastWriteTime.dwHighDateTime=0x1d34be7, nFileSizeHigh=0x0, nFileSizeLow=0x14694)) returned 1 [0032.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", lpFilePart=0x0) returned 0x2c [0032.551] GetFullPathNameW (in: lpFileName="kz2M.mp3", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\kz2M.mp3", lpFilePart=0x0) returned 0x25 [0032.551] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc698 [0032.551] FindNextFileW (in: hFindFile=0x4dc698, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.551] FindClose (in: hFindFile=0x4dc698 | out: hFindFile=0x4dc698) returned 1 [0032.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", lpFilePart=0x0) returned 0x2c [0032.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", lpFilePart=0x0) returned 0x2c [0032.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", lpFilePart=0x0) returned 0x2c [0032.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\kz2m.mp3"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb93b6650, ftCreationTime.dwHighDateTime=0x1d3581d, ftLastAccessTime.dwLowDateTime=0xc4c32bd0, ftLastAccessTime.dwHighDateTime=0x1d34be7, ftLastWriteTime.dwLowDateTime=0xc4c32bd0, ftLastWriteTime.dwHighDateTime=0x1d34be7, nFileSizeHigh=0x0, nFileSizeLow=0x14694)) returned 1 [0032.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3", lpFilePart=0x0) returned 0x2c [0032.551] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\kz2M.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\kz2m.mp3")) returned 1 [0032.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b9cbe1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b9cbe1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b9cbe1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b9cbe1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.553] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.553] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc7d8 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.553] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.553] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc7d8 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.553] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.553] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b9cbe1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b9cbe1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70b9cbe1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70b9cbe1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.554] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.554] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc918 [0032.554] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.554] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0032.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.554] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc918 [0032.554] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.555] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.555] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.555] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.555] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.555] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.555] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.555] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.555] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.555] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.555] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.555] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.555] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.555] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.555] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0032.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\QvxPYeWmyW121.wav", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\QvxPYeWmyW121.wav", lpFilePart=0x0) returned 0x35 [0032.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0032.555] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\QvxPYeWmyW121.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\qvxpyewmyw121.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.555] GetFileType (hFile=0x2c0) returned 0x1 [0032.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0032.555] GetFileType (hFile=0x2c0) returned 0x1 [0032.555] GetFileSize (in: hFile=0x2c0, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x182b1 [0032.555] ReadFile (in: hFile=0x2c0, lpBuffer=0x32f5b00, nNumberOfBytesToRead=0x182b1, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x32f5b00*, lpNumberOfBytesRead=0x33e948*=0x182b1, lpOverlapped=0x0) returned 1 [0032.556] CloseHandle (hObject=0x2c0) returned 1 [0032.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\QvxPYeWmyW121.wav.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\QvxPYeWmyW121.wav.Lime", lpFilePart=0x0) returned 0x3a [0032.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.559] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\QvxPYeWmyW121.wav.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\qvxpyewmyw121.wav.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.559] GetFileType (hFile=0x2c0) returned 0x1 [0032.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.559] GetFileType (hFile=0x2c0) returned 0x1 [0032.559] WriteFile (in: hFile=0x2c0, lpBuffer=0x330ddd0*, nNumberOfBytesToWrite=0x182c0, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x330ddd0*, lpNumberOfBytesWritten=0x33e938*=0x182c0, lpOverlapped=0x0) returned 1 [0032.561] CloseHandle (hObject=0x2c0) returned 1 [0032.563] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.563] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.563] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.565] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.565] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0032.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.565] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.565] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.565] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.565] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.565] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.565] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.565] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.565] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.566] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.566] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.566] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.566] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.566] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.566] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0032.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\QvxPYeWmyW121.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\qvxpyewmyw121.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898c6e00, ftCreationTime.dwHighDateTime=0x1d34f0c, ftLastAccessTime.dwLowDateTime=0xc51e4660, ftLastAccessTime.dwHighDateTime=0x1d354f6, ftLastWriteTime.dwLowDateTime=0xc51e4660, ftLastWriteTime.dwHighDateTime=0x1d354f6, nFileSizeHigh=0x0, nFileSizeLow=0x182b1)) returned 1 [0032.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.567] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\QvxPYeWmyW121.wav", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc298 [0032.567] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0032.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\QvxPYeWmyW121.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\qvxpyewmyw121.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898c6e00, ftCreationTime.dwHighDateTime=0x1d34f0c, ftLastAccessTime.dwLowDateTime=0xc51e4660, ftLastAccessTime.dwHighDateTime=0x1d354f6, ftLastWriteTime.dwLowDateTime=0xc51e4660, ftLastWriteTime.dwHighDateTime=0x1d354f6, nFileSizeHigh=0x0, nFileSizeLow=0x182b1)) returned 1 [0032.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.568] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\QvxPYeWmyW121.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\qvxpyewmyw121.wav")) returned 1 [0032.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70bc2ec8, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70bc2ec8, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70bc2ec8, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70bc2ec8, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.569] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc918 [0032.572] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0032.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.573] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc698 [0032.574] FindClose (in: hFindFile=0x4dc698 | out: hFindFile=0x4dc698) returned 1 [0032.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70bc2ec8, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70bc2ec8, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70bc2ec8, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70bc2ec8, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.574] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc6d8 [0032.575] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0032.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.575] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc7d8 [0032.576] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0032.576] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\SY3CPSU.m4a" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\sy3cpsu.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.576] GetFileType (hFile=0x2c0) returned 0x1 [0032.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0032.576] GetFileType (hFile=0x2c0) returned 0x1 [0032.576] GetFileSize (in: hFile=0x2c0, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x14a14 [0032.576] ReadFile (in: hFile=0x2c0, lpBuffer=0x214e708, nNumberOfBytesToRead=0x14a14, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x214e708*, lpNumberOfBytesRead=0x33e948*=0x14a14, lpOverlapped=0x0) returned 1 [0032.577] CloseHandle (hObject=0x2c0) returned 1 [0032.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.579] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\SY3CPSU.m4a.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\sy3cpsu.m4a.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.579] GetFileType (hFile=0x2c0) returned 0x1 [0032.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.579] GetFileType (hFile=0x2c0) returned 0x1 [0032.579] WriteFile (in: hFile=0x2c0, lpBuffer=0x21636d8*, nNumberOfBytesToWrite=0x14a20, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x21636d8*, lpNumberOfBytesWritten=0x33e938*=0x14a20, lpOverlapped=0x0) returned 1 [0032.580] CloseHandle (hObject=0x2c0) returned 1 [0032.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70be90d1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70be90d1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70be90d1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70be90d1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.582] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc918 [0032.583] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0032.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.583] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc298 [0032.584] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0032.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\SY3CPSU.m4a" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\sy3cpsu.m4a"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e47dd0, ftCreationTime.dwHighDateTime=0x1d34ee9, ftLastAccessTime.dwLowDateTime=0xe45efce0, ftLastAccessTime.dwHighDateTime=0x1d35145, ftLastWriteTime.dwLowDateTime=0xe45efce0, ftLastWriteTime.dwHighDateTime=0x1d35145, nFileSizeHigh=0x0, nFileSizeLow=0x14a14)) returned 1 [0032.585] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0032.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\SY3CPSU.m4a" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\sy3cpsu.m4a"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e47dd0, ftCreationTime.dwHighDateTime=0x1d34ee9, ftLastAccessTime.dwLowDateTime=0xe45efce0, ftLastAccessTime.dwHighDateTime=0x1d35145, ftLastWriteTime.dwLowDateTime=0xe45efce0, ftLastWriteTime.dwHighDateTime=0x1d35145, nFileSizeHigh=0x0, nFileSizeLow=0x14a14)) returned 1 [0032.586] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\SY3CPSU.m4a" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\sy3cpsu.m4a")) returned 1 [0032.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c0f525, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c0f525, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c0f525, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c0f525, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.587] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0032.588] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0032.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c0f525, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c0f525, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.589] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0032.590] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0032.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav.Lime", lpFilePart=0x0) returned 0x31 [0032.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.596] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\ufkl.wav.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.596] GetFileType (hFile=0x2c0) returned 0x1 [0032.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.596] GetFileType (hFile=0x2c0) returned 0x1 [0032.596] WriteFile (in: hFile=0x2c0, lpBuffer=0x3029390*, nNumberOfBytesToWrite=0x15750, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x3029390*, lpNumberOfBytesWritten=0x33e938*=0x15750, lpOverlapped=0x0) returned 1 [0032.597] CloseHandle (hObject=0x2c0) returned 1 [0032.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c0f525, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c0f525, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c0f525, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c0f525, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.600] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.600] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc458 [0032.600] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.600] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0032.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.600] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc558 [0032.600] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.600] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.600] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.601] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.601] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.601] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.601] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.601] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.601] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.601] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.601] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.601] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.601] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.601] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.601] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.601] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", lpFilePart=0x0) returned 0x2c [0032.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", lpFilePart=0x0) returned 0x2c [0032.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", lpFilePart=0x0) returned 0x2c [0032.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", lpFilePart=0x0) returned 0x2c [0032.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\ufkl.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6951a280, ftCreationTime.dwHighDateTime=0x1d3522d, ftLastAccessTime.dwLowDateTime=0xa7655e00, ftLastAccessTime.dwHighDateTime=0x1d353e9, ftLastWriteTime.dwLowDateTime=0xa7655e00, ftLastWriteTime.dwHighDateTime=0x1d353e9, nFileSizeHigh=0x0, nFileSizeLow=0x1574a)) returned 1 [0032.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", lpFilePart=0x0) returned 0x2c [0032.602] GetFullPathNameW (in: lpFileName="UfKL.wav", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\UfKL.wav", lpFilePart=0x0) returned 0x25 [0032.602] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc898 [0032.602] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.602] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", lpFilePart=0x0) returned 0x2c [0032.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", lpFilePart=0x0) returned 0x2c [0032.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", lpFilePart=0x0) returned 0x2c [0032.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\ufkl.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6951a280, ftCreationTime.dwHighDateTime=0x1d3522d, ftLastAccessTime.dwLowDateTime=0xa7655e00, ftLastAccessTime.dwHighDateTime=0x1d353e9, ftLastWriteTime.dwLowDateTime=0xa7655e00, ftLastWriteTime.dwHighDateTime=0x1d353e9, nFileSizeHigh=0x0, nFileSizeLow=0x1574a)) returned 1 [0032.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav", lpFilePart=0x0) returned 0x2c [0032.603] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UfKL.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\ufkl.wav")) returned 1 [0032.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c355c5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c355c5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c355c5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c355c5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.604] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.604] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc2d8 [0032.604] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.604] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0032.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.605] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc8d8 [0032.605] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.605] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.605] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.605] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.605] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.605] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.605] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.606] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.606] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.606] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.606] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.606] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.606] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.606] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.606] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c355c5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c355c5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c355c5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c355c5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.607] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.607] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc1d8 [0032.607] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.607] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0032.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.607] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc3d8 [0032.607] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.607] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.608] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.608] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.608] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.608] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.608] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.608] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.608] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.608] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.608] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.608] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.608] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.608] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.608] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0032.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", lpFilePart=0x0) returned 0x35 [0032.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0032.609] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\uxkqt2i9x6pc8.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.609] GetFileType (hFile=0x2c0) returned 0x1 [0032.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0032.609] GetFileType (hFile=0x2c0) returned 0x1 [0032.609] GetFileSize (in: hFile=0x2c0, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x9d1f [0032.609] ReadFile (in: hFile=0x2c0, lpBuffer=0x2042264, nNumberOfBytesToRead=0x9d1f, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x2042264*, lpNumberOfBytesRead=0x33e948*=0x9d1f, lpOverlapped=0x0) returned 1 [0032.609] CloseHandle (hObject=0x2c0) returned 1 [0032.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav.Lime", lpFilePart=0x0) returned 0x3a [0032.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.611] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\uxkqt2i9x6pc8.wav.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.611] GetFileType (hFile=0x2c0) returned 0x1 [0032.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.611] GetFileType (hFile=0x2c0) returned 0x1 [0032.611] WriteFile (in: hFile=0x2c0, lpBuffer=0x204c544*, nNumberOfBytesToWrite=0x9d20, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x204c544*, lpNumberOfBytesWritten=0x33e938*=0x9d20, lpOverlapped=0x0) returned 1 [0032.612] CloseHandle (hObject=0x2c0) returned 1 [0032.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c355c5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c355c5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c355c5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c355c5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.613] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.613] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc558 [0032.613] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.613] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.614] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc898 [0032.614] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.614] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.614] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.614] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.614] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.614] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.614] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.614] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.614] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.614] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.615] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.615] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.615] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.615] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.615] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.615] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", lpFilePart=0x0) returned 0x35 [0032.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", lpFilePart=0x0) returned 0x35 [0032.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", lpFilePart=0x0) returned 0x35 [0032.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", lpFilePart=0x0) returned 0x35 [0032.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\uxkqt2i9x6pc8.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4499e80, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0xed98b230, ftLastAccessTime.dwHighDateTime=0x1d34b3a, ftLastWriteTime.dwLowDateTime=0xed98b230, ftLastWriteTime.dwHighDateTime=0x1d34b3a, nFileSizeHigh=0x0, nFileSizeLow=0x9d1f)) returned 1 [0032.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", lpFilePart=0x0) returned 0x35 [0032.616] GetFullPathNameW (in: lpFileName="UXKqt2i9X6PC8.wav", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\UXKqt2i9X6PC8.wav", lpFilePart=0x0) returned 0x2e [0032.616] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc898 [0032.616] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.616] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", lpFilePart=0x0) returned 0x35 [0032.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", lpFilePart=0x0) returned 0x35 [0032.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", lpFilePart=0x0) returned 0x35 [0032.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\uxkqt2i9x6pc8.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4499e80, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0xed98b230, ftLastAccessTime.dwHighDateTime=0x1d34b3a, ftLastWriteTime.dwLowDateTime=0xed98b230, ftLastWriteTime.dwHighDateTime=0x1d34b3a, nFileSizeHigh=0x0, nFileSizeLow=0x9d1f)) returned 1 [0032.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav", lpFilePart=0x0) returned 0x35 [0032.616] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\UXKqt2i9X6PC8.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\uxkqt2i9x6pc8.wav")) returned 1 [0032.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c5b7df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c5b7df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c5b7df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c5b7df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.618] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.618] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc898 [0032.618] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.618] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.618] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc358 [0032.618] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.618] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.618] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.618] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.618] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.619] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.619] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.619] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.619] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.619] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.619] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.619] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.619] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.619] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.619] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0032.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c5b7df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c5b7df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c5b7df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c5b7df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.620] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.620] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc4d8 [0032.620] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.620] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0032.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.620] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc2d8 [0032.620] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.621] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.621] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.621] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.621] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.621] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.621] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.621] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.621] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.621] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.621] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.621] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.621] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.621] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.621] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0032.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", lpFilePart=0x0) returned 0x2f [0032.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0032.622] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\vw e9ij.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.622] GetFileType (hFile=0x2c0) returned 0x1 [0032.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0032.622] GetFileType (hFile=0x2c0) returned 0x1 [0032.622] GetFileSize (in: hFile=0x2c0, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x1546e [0032.622] ReadFile (in: hFile=0x2c0, lpBuffer=0x303eb00, nNumberOfBytesToRead=0x1546e, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x303eb00*, lpNumberOfBytesRead=0x33e948*=0x1546e, lpOverlapped=0x0) returned 1 [0032.622] CloseHandle (hObject=0x2c0) returned 1 [0032.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3.Lime", lpFilePart=0x0) returned 0x34 [0032.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.624] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\vw e9ij.mp3.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.625] GetFileType (hFile=0x2c0) returned 0x1 [0032.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.625] GetFileType (hFile=0x2c0) returned 0x1 [0032.625] WriteFile (in: hFile=0x2c0, lpBuffer=0x3053f90*, nNumberOfBytesToWrite=0x15470, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x3053f90*, lpNumberOfBytesWritten=0x33e938*=0x15470, lpOverlapped=0x0) returned 1 [0032.626] CloseHandle (hObject=0x2c0) returned 1 [0032.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c5b7df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c5b7df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c5b7df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c5b7df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.628] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.628] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc2d8 [0032.628] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.628] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0032.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.628] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc558 [0032.628] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.628] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.628] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.629] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", lpFilePart=0x0) returned 0x2f [0032.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", lpFilePart=0x0) returned 0x2f [0032.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", lpFilePart=0x0) returned 0x2f [0032.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", lpFilePart=0x0) returned 0x2f [0032.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\vw e9ij.mp3"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81153440, ftCreationTime.dwHighDateTime=0x1d35007, ftLastAccessTime.dwLowDateTime=0xd4cacd50, ftLastAccessTime.dwHighDateTime=0x1d3561c, ftLastWriteTime.dwLowDateTime=0xd4cacd50, ftLastWriteTime.dwHighDateTime=0x1d3561c, nFileSizeHigh=0x0, nFileSizeLow=0x1546e)) returned 1 [0032.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", lpFilePart=0x0) returned 0x2f [0032.630] GetFullPathNameW (in: lpFileName="vW e9IJ.mp3", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\vW e9IJ.mp3", lpFilePart=0x0) returned 0x28 [0032.630] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc558 [0032.630] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.630] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", lpFilePart=0x0) returned 0x2f [0032.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", lpFilePart=0x0) returned 0x2f [0032.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", lpFilePart=0x0) returned 0x2f [0032.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\vw e9ij.mp3"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81153440, ftCreationTime.dwHighDateTime=0x1d35007, ftLastAccessTime.dwLowDateTime=0xd4cacd50, ftLastAccessTime.dwHighDateTime=0x1d3561c, ftLastWriteTime.dwLowDateTime=0xd4cacd50, ftLastWriteTime.dwHighDateTime=0x1d3561c, nFileSizeHigh=0x0, nFileSizeLow=0x1546e)) returned 1 [0032.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3", lpFilePart=0x0) returned 0x2f [0032.630] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\vW e9IJ.mp3" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\vw e9ij.mp3")) returned 1 [0032.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c5b7df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c5b7df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c5b7df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c5b7df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.632] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.632] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc7d8 [0032.632] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.632] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.632] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc798 [0032.632] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.632] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.633] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.633] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.633] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.633] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.633] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.633] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.633] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.633] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.633] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.633] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.633] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.633] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.633] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c5b7df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c5b7df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c5b7df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c5b7df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.634] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.634] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc7d8 [0032.634] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.634] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.634] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc458 [0032.634] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.634] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.635] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.635] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.635] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.635] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.635] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.635] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.635] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.635] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.635] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.635] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.635] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.635] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.635] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0032.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", lpFilePart=0x0) returned 0x36 [0032.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0032.635] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\yotflh9s-- h9v.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.635] GetFileType (hFile=0x2c0) returned 0x1 [0032.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0032.635] GetFileType (hFile=0x2c0) returned 0x1 [0032.636] GetFileSize (in: hFile=0x2c0, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x7307 [0032.636] ReadFile (in: hFile=0x2c0, lpBuffer=0x2071860, nNumberOfBytesToRead=0x7307, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x2071860*, lpNumberOfBytesRead=0x33e948*=0x7307, lpOverlapped=0x0) returned 1 [0032.636] CloseHandle (hObject=0x2c0) returned 1 [0032.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav.Lime", lpFilePart=0x0) returned 0x3b [0032.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0032.637] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\yotflh9s-- h9v.wav.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c0 [0032.637] GetFileType (hFile=0x2c0) returned 0x1 [0032.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0032.637] GetFileType (hFile=0x2c0) returned 0x1 [0032.637] WriteFile (in: hFile=0x2c0, lpBuffer=0x2079130*, nNumberOfBytesToWrite=0x7310, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x2079130*, lpNumberOfBytesWritten=0x33e938*=0x7310, lpOverlapped=0x0) returned 1 [0032.638] CloseHandle (hObject=0x2c0) returned 1 [0032.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c81ab3, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c81ab3, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c81ab3, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c81ab3, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.639] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.639] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc8d8 [0032.639] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.639] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.640] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc4d8 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.640] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.640] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0032.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", lpFilePart=0x0) returned 0x36 [0032.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", lpFilePart=0x0) returned 0x36 [0032.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", lpFilePart=0x0) returned 0x36 [0032.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", lpFilePart=0x0) returned 0x36 [0032.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0032.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\yotflh9s-- h9v.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17bc76d0, ftCreationTime.dwHighDateTime=0x1d34ee9, ftLastAccessTime.dwLowDateTime=0xb2a5d0b0, ftLastAccessTime.dwHighDateTime=0x1d34b29, ftLastWriteTime.dwLowDateTime=0xb2a5d0b0, ftLastWriteTime.dwHighDateTime=0x1d34b29, nFileSizeHigh=0x0, nFileSizeLow=0x7307)) returned 1 [0032.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0032.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0032.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", lpFilePart=0x0) returned 0x36 [0032.640] GetFullPathNameW (in: lpFileName="yOtFLh9S-- H9v.wav", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\yOtFLh9S-- H9v.wav", lpFilePart=0x0) returned 0x2f [0032.640] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc458 [0032.641] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0032.641] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0032.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0032.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0032.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", lpFilePart=0x0) returned 0x36 [0032.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", lpFilePart=0x0) returned 0x36 [0032.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", lpFilePart=0x0) returned 0x36 [0032.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0032.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\yotflh9s-- h9v.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17bc76d0, ftCreationTime.dwHighDateTime=0x1d34ee9, ftLastAccessTime.dwLowDateTime=0xb2a5d0b0, ftLastAccessTime.dwHighDateTime=0x1d34b29, ftLastWriteTime.dwLowDateTime=0xb2a5d0b0, ftLastWriteTime.dwHighDateTime=0x1d34b29, nFileSizeHigh=0x0, nFileSizeLow=0x7307)) returned 1 [0032.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0032.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav", lpFilePart=0x0) returned 0x36 [0032.641] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\yOtFLh9S-- H9v.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw\\yotflh9s-- h9v.wav")) returned 1 [0032.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0032.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c81ab3, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c81ab3, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0032.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0032.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw" (normalized: "c:\\users\\5jghkoaofdp\\music\\_wgbp3qw"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84169960, ftCreationTime.dwHighDateTime=0x1d351f4, ftLastAccessTime.dwLowDateTime=0x70c81ab3, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70c81ab3, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0032.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0032.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0032.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.642] GetFullPathNameW (in: lpFileName="_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_wGbp3Qw", lpFilePart=0x0) returned 0x25 [0032.642] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc8d8 [0032.642] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.642] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0032.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0032.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0032.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw", lpFilePart=0x0) returned 0x23 [0032.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\", lpFilePart=0x0) returned 0x24 [0032.642] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\_wGbp3Qw\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc418 [0032.642] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.643] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0032.643] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0032.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0032.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0032.643] CoTaskMemAlloc (cb=0x20c) returned 0x4efbb0 [0032.643] SHGetFolderPathW (in: hwnd=0x0, csidl=14, hToken=0x0, dwFlags=0x0, pszPath=0x4efbb0 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Videos") returned 0x0 [0032.643] CoTaskMemFree (pv=0x4efbb0) [0032.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e498, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\", lpFilePart=0x0) returned 0x1c [0032.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos" (normalized: "c:\\users\\5jghkoaofdp\\videos"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f7c1b3d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f7c1b3d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos" (normalized: "c:\\users\\5jghkoaofdp\\videos"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f7c1b3d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f7c1b3d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.644] GetFullPathNameW (in: lpFileName="Videos", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Videos", lpFilePart=0x0) returned 0x23 [0032.644] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc218 [0032.644] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.644] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0032.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\", lpFilePart=0x0) returned 0x1c [0032.644] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc6d8 [0032.645] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.645] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.645] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.645] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.645] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.645] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.645] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.645] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.645] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.645] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.645] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.645] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.646] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0032.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\", lpFilePart=0x0) returned 0x1c [0032.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos" (normalized: "c:\\users\\5jghkoaofdp\\videos"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f7c1b3d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f7c1b3d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos" (normalized: "c:\\users\\5jghkoaofdp\\videos"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f7c1b3d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f7c1b3d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.646] GetFullPathNameW (in: lpFileName="Videos", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Videos", lpFilePart=0x0) returned 0x23 [0032.646] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc798 [0032.646] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.646] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\", lpFilePart=0x0) returned 0x1c [0032.647] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc7d8 [0032.647] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.647] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.647] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.647] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.647] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.647] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.647] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.647] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.647] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.648] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.648] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.648] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.648] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\", lpFilePart=0x0) returned 0x1c [0032.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos" (normalized: "c:\\users\\5jghkoaofdp\\videos"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f7c1b3d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f7c1b3d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos" (normalized: "c:\\users\\5jghkoaofdp\\videos"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x5f7c1b3d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x5f7c1b3d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.648] GetFullPathNameW (in: lpFileName="Videos", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Videos", lpFilePart=0x0) returned 0x23 [0032.649] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc798 [0032.649] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.649] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\", lpFilePart=0x0) returned 0x1c [0032.649] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc8d8 [0032.649] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.649] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.649] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.649] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.649] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.649] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.650] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.650] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.650] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.650] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.650] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.650] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.650] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi", lpFilePart=0x0) returned 0x29 [0032.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.650] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi" (normalized: "c:\\users\\5jghkoaofdp\\videos\\40y6k2fub.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c4 [0032.650] GetFileType (hFile=0x2c4) returned 0x1 [0032.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.650] GetFileType (hFile=0x2c4) returned 0x1 [0032.650] GetFileSize (in: hFile=0x2c4, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x17e99 [0032.650] ReadFile (in: hFile=0x2c4, lpBuffer=0x3069420, nNumberOfBytesToRead=0x17e99, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x3069420*, lpNumberOfBytesRead=0x33e984*=0x17e99, lpOverlapped=0x0) returned 1 [0032.651] CloseHandle (hObject=0x2c4) returned 1 [0032.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi.Lime", lpFilePart=0x0) returned 0x2e [0032.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.653] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi.Lime" (normalized: "c:\\users\\5jghkoaofdp\\videos\\40y6k2fub.avi.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c4 [0032.653] GetFileType (hFile=0x2c4) returned 0x1 [0032.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.653] GetFileType (hFile=0x2c4) returned 0x1 [0032.653] WriteFile (in: hFile=0x2c4, lpBuffer=0x30812d8*, nNumberOfBytesToWrite=0x17ea0, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x30812d8*, lpNumberOfBytesWritten=0x33e974*=0x17ea0, lpOverlapped=0x0) returned 1 [0032.655] CloseHandle (hObject=0x2c4) returned 1 [0032.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\", lpFilePart=0x0) returned 0x1c [0032.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos" (normalized: "c:\\users\\5jghkoaofdp\\videos"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70ca7cb4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70ca7cb4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos" (normalized: "c:\\users\\5jghkoaofdp\\videos"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70ca7cb4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70ca7cb4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.657] GetFullPathNameW (in: lpFileName="Videos", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Videos", lpFilePart=0x0) returned 0x23 [0032.657] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc8d8 [0032.657] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.657] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\", lpFilePart=0x0) returned 0x1c [0032.657] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc8d8 [0032.657] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.657] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.657] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.657] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.658] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.658] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.658] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.658] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.658] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.658] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.658] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.658] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.658] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.658] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi", lpFilePart=0x0) returned 0x29 [0032.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi", lpFilePart=0x0) returned 0x29 [0032.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi", lpFilePart=0x0) returned 0x29 [0032.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi", lpFilePart=0x0) returned 0x29 [0032.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi" (normalized: "c:\\users\\5jghkoaofdp\\videos\\40y6k2fub.avi"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b113e0, ftCreationTime.dwHighDateTime=0x1d35103, ftLastAccessTime.dwLowDateTime=0xd63ad130, ftLastAccessTime.dwHighDateTime=0x1d35270, ftLastWriteTime.dwLowDateTime=0xd63ad130, ftLastWriteTime.dwHighDateTime=0x1d35270, nFileSizeHigh=0x0, nFileSizeLow=0x17e99)) returned 1 [0032.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos", lpFilePart=0x0) returned 0x1b [0032.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi", lpFilePart=0x0) returned 0x29 [0032.659] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc8d8 [0032.659] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0032.659] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi" (normalized: "c:\\users\\5jghkoaofdp\\videos\\40y6k2fub.avi"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b113e0, ftCreationTime.dwHighDateTime=0x1d35103, ftLastAccessTime.dwLowDateTime=0xd63ad130, ftLastAccessTime.dwHighDateTime=0x1d35270, ftLastWriteTime.dwLowDateTime=0xd63ad130, ftLastWriteTime.dwHighDateTime=0x1d35270, nFileSizeHigh=0x0, nFileSizeLow=0x17e99)) returned 1 [0032.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.659] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\40Y6k2FUB.avi" (normalized: "c:\\users\\5jghkoaofdp\\videos\\40y6k2fub.avi")) returned 1 [0032.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos" (normalized: "c:\\users\\5jghkoaofdp\\videos"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70ca7cb4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70ca7cb4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos" (normalized: "c:\\users\\5jghkoaofdp\\videos"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70ca7cb4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70ca7cb4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.661] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc4d8 [0032.661] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.661] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0032.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.661] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc4d8 [0032.661] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.661] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.661] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.661] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.661] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.662] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.662] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.662] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.662] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.662] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.662] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.662] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.662] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0032.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos" (normalized: "c:\\users\\5jghkoaofdp\\videos"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70ca7cb4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70ca7cb4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos" (normalized: "c:\\users\\5jghkoaofdp\\videos"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70ca7cb4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70ca7cb4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0032.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.663] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc558 [0032.663] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.663] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.663] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc498 [0032.663] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.663] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.664] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0032.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.670] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0032.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.671] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0032.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.671] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0032.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.673] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0032.724] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc7d8 [0032.724] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0032.724] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC", lpFilePart=0x0) returned 0x30 [0032.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC", lpFilePart=0x0) returned 0x30 [0032.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\", lpFilePart=0x0) returned 0x31 [0032.724] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc458 [0032.724] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.724] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.724] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.724] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.724] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0032.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\N683 mrYSd2C.mp4.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\N683 mrYSd2C.mp4.Lime", lpFilePart=0x0) returned 0x46 [0032.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\werh1KCVYOib.mkv.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\werh1KCVYOib.mkv.Lime", lpFilePart=0x0) returned 0x46 [0032.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\_vKQCiGaup267rX.mkv.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\_vKQCiGaup267rX.mkv.Lime", lpFilePart=0x0) returned 0x49 [0032.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\D_InXCG5cFZMlQ\\7FTYBF5 op.swf.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\D_InXCG5cFZMlQ\\7FTYBF5 op.swf.Lime", lpFilePart=0x0) returned 0x53 [0032.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\D_InXCG5cFZMlQ\\eEN7_BoIY.flv.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\D_InXCG5cFZMlQ\\eEN7_BoIY.flv.Lime", lpFilePart=0x0) returned 0x52 [0032.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\D_InXCG5cFZMlQ\\ZACCanP.flv.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\D_InXCG5cFZMlQ\\ZACCanP.flv.Lime", lpFilePart=0x0) returned 0x50 [0032.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\D_InXCG5cFZMlQ\\ZAm1A.mp4.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\IUkxYhr8GjQV_ITpeqgC\\D_InXCG5cFZMlQ\\ZAm1A.mp4.Lime", lpFilePart=0x0) returned 0x4e [0032.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\0wMH.mp4.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\0wMH.mp4.Lime", lpFilePart=0x0) returned 0x3d [0032.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\3xiSse6n.mp4.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\3xiSse6n.mp4.Lime", lpFilePart=0x0) returned 0x41 [0032.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\dZn20c 11Y.avi.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\dZn20c 11Y.avi.Lime", lpFilePart=0x0) returned 0x43 [0032.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\ecR_ZWV4hMkW4bn.mkv.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\ecR_ZWV4hMkW4bn.mkv.Lime", lpFilePart=0x0) returned 0x48 [0032.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\jbPXRr4O5vuDg5yu.flv.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\jbPXRr4O5vuDg5yu.flv.Lime", lpFilePart=0x0) returned 0x49 [0032.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\KwUZAB3qny4EW.flv.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\KwUZAB3qny4EW.flv.Lime", lpFilePart=0x0) returned 0x46 [0032.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\lqRLtC.flv.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\lqRLtC.flv.Lime", lpFilePart=0x0) returned 0x3f [0032.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\nt4vsCGtFqeasiPfD.mp4.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\nt4vsCGtFqeasiPfD.mp4.Lime", lpFilePart=0x0) returned 0x4a [0032.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL", lpFilePart=0x0) returned 0x2f [0032.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\R5obBd9mtgU.avi.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\R5obBd9mtgU.avi.Lime", lpFilePart=0x0) returned 0x44 [0032.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\XqD28mQ2HI5lt.mp4.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Videos\\rljh22OU64-E_mygdfL\\XqD28mQ2HI5lt.mp4.Lime", lpFilePart=0x0) returned 0x46 [0032.839] CoTaskMemAlloc (cb=0x20c) returned 0x4efbb0 [0032.839] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x4efbb0 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Desktop") returned 0x0 [0032.840] CoTaskMemFree (pv=0x4efbb0) [0032.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e498, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x62fc9197, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x62fc9197, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x62fc9197, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x62fc9197, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.840] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0032.840] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc6d8 [0032.841] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.841] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0032.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.841] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc618 [0032.841] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.841] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.841] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.841] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.841] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.841] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.842] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.842] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.842] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.842] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.842] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.842] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.842] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.842] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.842] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.842] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.842] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.842] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.842] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.842] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.843] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.843] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.843] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.843] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.843] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.843] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.843] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.843] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.843] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.843] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.843] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.843] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.844] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.844] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.844] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.844] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.844] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.844] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.844] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0032.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x62fc9197, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x62fc9197, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x62fc9197, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x62fc9197, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.845] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0032.845] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc4d8 [0032.845] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.845] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0032.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.845] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc458 [0032.845] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.845] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.845] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.845] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.846] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.846] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.846] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.846] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.846] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.846] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.846] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.846] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.846] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.846] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.846] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.846] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.846] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.846] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.847] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.847] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.847] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.847] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.847] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.847] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.847] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.847] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.847] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.847] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.847] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.847] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.847] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.848] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.848] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.848] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.848] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.848] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.848] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.848] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.848] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0032.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x62fc9197, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x62fc9197, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x62fc9197, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x62fc9197, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.849] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0032.849] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc618 [0032.849] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.849] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0032.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.849] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc458 [0032.849] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.850] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.850] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.850] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.850] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.850] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.850] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.850] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.850] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.850] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.850] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.850] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.851] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.851] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.851] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.851] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.851] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.851] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.851] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.851] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.851] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.851] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.851] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.851] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.851] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.851] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.852] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.852] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.852] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.852] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.852] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.852] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.852] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.852] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.852] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.852] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.853] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.853] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.853] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0032.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", lpFilePart=0x0) returned 0x32 [0032.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.853] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\2-lzf_caeytdih8ls.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0032.853] GetFileType (hFile=0x2c8) returned 0x1 [0032.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.853] GetFileType (hFile=0x2c8) returned 0x1 [0032.853] GetFileSize (in: hFile=0x2c8, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x15108 [0032.853] ReadFile (in: hFile=0x2c8, lpBuffer=0x32c48c0, nNumberOfBytesToRead=0x15108, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x32c48c0*, lpNumberOfBytesRead=0x33e984*=0x15108, lpOverlapped=0x0) returned 1 [0032.853] CloseHandle (hObject=0x2c8) returned 1 [0032.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi.Lime", lpFilePart=0x0) returned 0x37 [0032.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.855] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi.Lime" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\2-lzf_caeytdih8ls.avi.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0032.856] GetFileType (hFile=0x2c8) returned 0x1 [0032.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.856] GetFileType (hFile=0x2c8) returned 0x1 [0032.856] WriteFile (in: hFile=0x2c8, lpBuffer=0x32d99e8*, nNumberOfBytesToWrite=0x15110, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x32d99e8*, lpNumberOfBytesWritten=0x33e974*=0x15110, lpOverlapped=0x0) returned 1 [0032.857] CloseHandle (hObject=0x2c8) returned 1 [0032.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70e97af7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70e97af7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70e97af7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70e97af7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.859] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0032.860] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc498 [0032.860] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.860] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0032.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.860] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc618 [0032.860] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.860] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.860] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.860] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.860] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.861] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.862] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.862] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0032.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", lpFilePart=0x0) returned 0x32 [0032.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", lpFilePart=0x0) returned 0x32 [0032.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", lpFilePart=0x0) returned 0x32 [0032.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", lpFilePart=0x0) returned 0x32 [0032.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\2-lzf_caeytdih8ls.avi"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x797aa870, ftCreationTime.dwHighDateTime=0x1d34c2c, ftLastAccessTime.dwLowDateTime=0x93b20280, ftLastAccessTime.dwHighDateTime=0x1d34eaa, ftLastWriteTime.dwLowDateTime=0x93b20280, ftLastWriteTime.dwHighDateTime=0x1d34eaa, nFileSizeHigh=0x0, nFileSizeLow=0x15108)) returned 1 [0032.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", lpFilePart=0x0) returned 0x32 [0032.863] GetFullPathNameW (in: lpFileName="2-Lzf_caeYTdiH8Ls.avi", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", lpFilePart=0x0) returned 0x32 [0032.863] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc798 [0032.863] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0032.863] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", lpFilePart=0x0) returned 0x32 [0032.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", lpFilePart=0x0) returned 0x32 [0032.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", lpFilePart=0x0) returned 0x32 [0032.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\2-lzf_caeytdih8ls.avi"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x797aa870, ftCreationTime.dwHighDateTime=0x1d34c2c, ftLastAccessTime.dwLowDateTime=0x93b20280, ftLastAccessTime.dwHighDateTime=0x1d34eaa, ftLastWriteTime.dwLowDateTime=0x93b20280, ftLastWriteTime.dwHighDateTime=0x1d34eaa, nFileSizeHigh=0x0, nFileSizeLow=0x15108)) returned 1 [0032.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi", lpFilePart=0x0) returned 0x32 [0032.863] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2-Lzf_caeYTdiH8Ls.avi" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\2-lzf_caeytdih8ls.avi")) returned 1 [0032.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70e97af7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70e97af7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70e97af7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70e97af7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.865] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0032.865] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc8d8 [0032.865] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.865] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0032.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.865] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc498 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.865] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.866] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.867] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.867] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0032.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70e97af7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70e97af7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70e97af7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70e97af7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.867] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0032.867] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc618 [0032.867] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.867] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0032.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.868] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc798 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.868] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.869] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.869] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.869] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.869] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.869] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.869] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.869] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2kZLcFwdX.mkv", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\2kZLcFwdX.mkv", lpFilePart=0x0) returned 0x2a [0032.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.869] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2kZLcFwdX.mkv" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\2kzlcfwdx.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0032.869] GetFileType (hFile=0x2c8) returned 0x1 [0032.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.869] GetFileType (hFile=0x2c8) returned 0x1 [0032.869] GetFileSize (in: hFile=0x2c8, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x10e2d [0032.869] ReadFile (in: hFile=0x2c8, lpBuffer=0x21be670, nNumberOfBytesToRead=0x10e2d, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x21be670*, lpNumberOfBytesRead=0x33e984*=0x10e2d, lpOverlapped=0x0) returned 1 [0032.869] CloseHandle (hObject=0x2c8) returned 1 [0032.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2kZLcFwdX.mkv.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\2kZLcFwdX.mkv.Lime", lpFilePart=0x0) returned 0x2f [0032.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.871] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\2kZLcFwdX.mkv.Lime" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\2kzlcfwdx.mkv.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0032.871] GetFileType (hFile=0x2c8) returned 0x1 [0032.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.871] GetFileType (hFile=0x2c8) returned 0x1 [0032.871] WriteFile (in: hFile=0x2c8, lpBuffer=0x21cfa48*, nNumberOfBytesToWrite=0x10e30, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x21cfa48*, lpNumberOfBytesWritten=0x33e974*=0x10e30, lpOverlapped=0x0) returned 1 [0032.872] CloseHandle (hObject=0x2c8) returned 1 [0032.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70ebdd95, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70ebdd95, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70ebdd95, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70ebdd95, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.874] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0032.874] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc4d8 [0032.875] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.875] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0032.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.875] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc4d8 [0032.875] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.875] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.875] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.875] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.875] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.875] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.875] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.875] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.875] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.875] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.875] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.875] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\4ILnYCodTBiAm3.bmp.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\4ILnYCodTBiAm3.bmp.Lime", lpFilePart=0x0) returned 0x34 [0032.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\4U6NJ-WA2Cbpmm-.swf.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\4U6NJ-WA2Cbpmm-.swf.Lime", lpFilePart=0x0) returned 0x35 [0032.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.895] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.895] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.895] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.895] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.895] FindClose (in: hFindFile=0x4dc518 | out: hFindFile=0x4dc518) returned 1 [0032.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", lpFilePart=0x0) returned 0x34 [0032.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.895] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\6l2vjzd4y qgt3nzdwl.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0032.895] GetFileType (hFile=0x2c8) returned 0x1 [0032.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.895] GetFileType (hFile=0x2c8) returned 0x1 [0032.896] GetFileSize (in: hFile=0x2c8, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x17b3e [0032.896] ReadFile (in: hFile=0x2c8, lpBuffer=0x333b818, nNumberOfBytesToRead=0x17b3e, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x333b818*, lpNumberOfBytesRead=0x33e984*=0x17b3e, lpOverlapped=0x0) returned 1 [0032.896] CloseHandle (hObject=0x2c8) returned 1 [0032.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav.Lime", lpFilePart=0x0) returned 0x39 [0032.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.900] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav.Lime" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\6l2vjzd4y qgt3nzdwl.wav.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0032.900] GetFileType (hFile=0x2c8) returned 0x1 [0032.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.900] GetFileType (hFile=0x2c8) returned 0x1 [0032.900] WriteFile (in: hFile=0x2c8, lpBuffer=0x3029390*, nNumberOfBytesToWrite=0x17b40, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x3029390*, lpNumberOfBytesWritten=0x33e974*=0x17b40, lpOverlapped=0x0) returned 1 [0032.902] CloseHandle (hObject=0x2c8) returned 1 [0032.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70f0a233, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70f0a233, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70f0a233, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70f0a233, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.904] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0032.904] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc798 [0032.904] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.904] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0032.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.904] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc298 [0032.905] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.905] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.905] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.905] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.905] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.905] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.905] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.905] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.905] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.905] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.905] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.905] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.905] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.906] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.906] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.906] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.906] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.906] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.906] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.906] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.906] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.906] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.906] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.906] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.906] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.906] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.907] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.907] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.907] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.907] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.907] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.907] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.907] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.907] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.907] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.907] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.907] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.907] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.908] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.908] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0032.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", lpFilePart=0x0) returned 0x34 [0032.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", lpFilePart=0x0) returned 0x34 [0032.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", lpFilePart=0x0) returned 0x34 [0032.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", lpFilePart=0x0) returned 0x34 [0032.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\6l2vjzd4y qgt3nzdwl.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ae07b0, ftCreationTime.dwHighDateTime=0x1d35642, ftLastAccessTime.dwLowDateTime=0x550f7950, ftLastAccessTime.dwHighDateTime=0x1d34c92, ftLastWriteTime.dwLowDateTime=0x550f7950, ftLastWriteTime.dwHighDateTime=0x1d34c92, nFileSizeHigh=0x0, nFileSizeLow=0x17b3e)) returned 1 [0032.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", lpFilePart=0x0) returned 0x34 [0032.908] GetFullPathNameW (in: lpFileName="6L2VJzd4y qgt3nZDwL.wav", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", lpFilePart=0x0) returned 0x34 [0032.908] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc2d8 [0032.908] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0032.908] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0032.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", lpFilePart=0x0) returned 0x34 [0032.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", lpFilePart=0x0) returned 0x34 [0032.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", lpFilePart=0x0) returned 0x34 [0032.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\6l2vjzd4y qgt3nzdwl.wav"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ae07b0, ftCreationTime.dwHighDateTime=0x1d35642, ftLastAccessTime.dwLowDateTime=0x550f7950, ftLastAccessTime.dwHighDateTime=0x1d34c92, ftLastWriteTime.dwLowDateTime=0x550f7950, ftLastWriteTime.dwHighDateTime=0x1d34c92, nFileSizeHigh=0x0, nFileSizeLow=0x17b3e)) returned 1 [0032.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav", lpFilePart=0x0) returned 0x34 [0032.909] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6L2VJzd4y qgt3nZDwL.wav" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\6l2vjzd4y qgt3nzdwl.wav")) returned 1 [0032.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70f0a233, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70f0a233, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70f0a233, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70f0a233, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.910] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0032.910] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc7d8 [0032.910] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.910] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0032.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.911] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc1d8 [0032.911] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.911] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.911] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.911] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.911] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.911] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.911] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.911] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.912] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.912] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.912] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.912] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.912] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.912] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.912] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.912] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.912] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.912] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.912] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.912] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.912] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.913] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.913] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.913] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.913] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.913] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.913] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.913] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.913] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.913] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.914] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.914] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.914] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.914] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.914] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.914] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.914] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.914] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.914] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0032.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70f0a233, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70f0a233, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70f0a233, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70f0a233, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.915] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0032.915] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc558 [0032.915] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.915] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0032.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.915] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc1d8 [0032.915] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.916] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.916] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.916] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.916] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.916] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.916] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.916] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.916] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.916] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.916] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.916] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.916] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.917] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.917] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.917] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.917] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.917] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.917] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.917] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.917] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.917] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.917] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.917] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.917] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.917] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.917] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.918] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.918] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.918] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.918] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.918] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.918] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.918] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.918] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.918] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.918] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.918] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.918] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0032.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", lpFilePart=0x0) returned 0x30 [0032.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.919] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\6s fhiyfbc68fla.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0032.919] GetFileType (hFile=0x2c8) returned 0x1 [0032.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.919] GetFileType (hFile=0x2c8) returned 0x1 [0032.919] GetFileSize (in: hFile=0x2c8, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x8936 [0032.919] ReadFile (in: hFile=0x2c8, lpBuffer=0x204d460, nNumberOfBytesToRead=0x8936, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x204d460*, lpNumberOfBytesRead=0x33e984*=0x8936, lpOverlapped=0x0) returned 1 [0032.919] CloseHandle (hObject=0x2c8) returned 1 [0032.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv.Lime", lpFilePart=0x0) returned 0x35 [0032.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.920] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv.Lime" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\6s fhiyfbc68fla.flv.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0032.920] GetFileType (hFile=0x2c8) returned 0x1 [0032.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.921] GetFileType (hFile=0x2c8) returned 0x1 [0032.921] WriteFile (in: hFile=0x2c8, lpBuffer=0x2056354*, nNumberOfBytesToWrite=0x8940, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x2056354*, lpNumberOfBytesWritten=0x33e974*=0x8940, lpOverlapped=0x0) returned 1 [0032.921] CloseHandle (hObject=0x2c8) returned 1 [0032.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70f30534, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70f30534, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70f30534, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70f30534, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.923] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0032.923] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc518 [0032.923] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.923] FindClose (in: hFindFile=0x4dc518 | out: hFindFile=0x4dc518) returned 1 [0032.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.924] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc898 [0032.924] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.924] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.924] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.924] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.924] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.924] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.924] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.924] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.924] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.924] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.924] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.924] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.924] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.924] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.925] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.925] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", lpFilePart=0x0) returned 0x30 [0032.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", lpFilePart=0x0) returned 0x30 [0032.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", lpFilePart=0x0) returned 0x30 [0032.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", lpFilePart=0x0) returned 0x30 [0032.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\6s fhiyfbc68fla.flv"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f24ec0, ftCreationTime.dwHighDateTime=0x1d354bf, ftLastAccessTime.dwLowDateTime=0x434121e0, ftLastAccessTime.dwHighDateTime=0x1d35211, ftLastWriteTime.dwLowDateTime=0x434121e0, ftLastWriteTime.dwHighDateTime=0x1d35211, nFileSizeHigh=0x0, nFileSizeLow=0x8936)) returned 1 [0032.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", lpFilePart=0x0) returned 0x30 [0032.926] GetFullPathNameW (in: lpFileName="6s FhIyFBc68flA.flv", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", lpFilePart=0x0) returned 0x30 [0032.926] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc218 [0032.926] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0032.926] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0032.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", lpFilePart=0x0) returned 0x30 [0032.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", lpFilePart=0x0) returned 0x30 [0032.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", lpFilePart=0x0) returned 0x30 [0032.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\6s fhiyfbc68fla.flv"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f24ec0, ftCreationTime.dwHighDateTime=0x1d354bf, ftLastAccessTime.dwLowDateTime=0x434121e0, ftLastAccessTime.dwHighDateTime=0x1d35211, ftLastWriteTime.dwLowDateTime=0x434121e0, ftLastWriteTime.dwHighDateTime=0x1d35211, nFileSizeHigh=0x0, nFileSizeLow=0x8936)) returned 1 [0032.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv", lpFilePart=0x0) returned 0x30 [0032.926] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\6s FhIyFBc68flA.flv" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\6s fhiyfbc68fla.flv")) returned 1 [0032.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70f30534, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70f30534, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70f30534, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70f30534, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.928] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0032.928] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc498 [0032.928] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.928] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0032.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.929] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc898 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.929] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.930] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.930] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.930] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.930] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.930] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.930] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.930] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0032.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70f30534, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70f30534, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70f30534, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70f30534, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.930] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0032.930] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc898 [0032.930] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.930] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.931] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc898 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.931] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.932] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.932] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.932] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.932] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.932] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.932] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0032.932] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0032.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\7huc nP.mkv", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\7huc nP.mkv", lpFilePart=0x0) returned 0x28 [0032.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.932] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\7huc nP.mkv" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\7huc np.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0032.932] GetFileType (hFile=0x2c8) returned 0x1 [0032.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.932] GetFileType (hFile=0x2c8) returned 0x1 [0032.932] GetFileSize (in: hFile=0x2c8, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x18974 [0032.932] ReadFile (in: hFile=0x2c8, lpBuffer=0x3040ef0, nNumberOfBytesToRead=0x18974, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x3040ef0*, lpNumberOfBytesRead=0x33e984*=0x18974, lpOverlapped=0x0) returned 1 [0032.932] CloseHandle (hObject=0x2c8) returned 1 [0032.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\7huc nP.mkv.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\7huc nP.mkv.Lime", lpFilePart=0x0) returned 0x2d [0032.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.935] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\7huc nP.mkv.Lime" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\7huc np.mkv.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0032.935] GetFileType (hFile=0x2c8) returned 0x1 [0032.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.935] GetFileType (hFile=0x2c8) returned 0x1 [0032.935] WriteFile (in: hFile=0x2c8, lpBuffer=0x3059880*, nNumberOfBytesToWrite=0x18980, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x3059880*, lpNumberOfBytesWritten=0x33e974*=0x18980, lpOverlapped=0x0) returned 1 [0032.936] CloseHandle (hObject=0x2c8) returned 1 [0032.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70f566ce, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70f566ce, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70f566ce, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70f566ce, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0032.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0032.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.939] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0032.939] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc418 [0032.939] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0032.939] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0032.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0032.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0032.939] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc898 [0032.939] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.939] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.939] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.939] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.939] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.939] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.940] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.940] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.940] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.940] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0032.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\87Q_hDzO1Ec2KqO4tBD.mkv.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\87Q_hDzO1Ec2KqO4tBD.mkv.Lime", lpFilePart=0x0) returned 0x39 [0032.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\88GGCILiS.mp3.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\88GGCILiS.mp3.Lime", lpFilePart=0x0) returned 0x2f [0032.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\bBO2m-r.mp3.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\bBO2m-r.mp3.Lime", lpFilePart=0x0) returned 0x2d [0032.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0032.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0032.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0032.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0032.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0032.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0032.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0032.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0032.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0032.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0032.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0032.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0032.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Blyd3ewk2KVx_Jv-L.mp4.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Blyd3ewk2KVx_Jv-L.mp4.Lime", lpFilePart=0x0) returned 0x37 [0032.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0032.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0032.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0032.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\cVwQ.mp3.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\cVwQ.mp3.Lime", lpFilePart=0x0) returned 0x2a [0032.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2d [0032.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\dpQj5iS5pPeMzvQVwhmY.mp4.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\dpQj5iS5pPeMzvQVwhmY.mp4.Lime", lpFilePart=0x0) returned 0x3a [0032.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\g1QKP-i_-gHHmnQA6cy.jpg.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\g1QKP-i_-gHHmnQA6cy.jpg.Lime", lpFilePart=0x0) returned 0x39 [0032.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\ilwbBlv.gif.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\ilwbBlv.gif.Lime", lpFilePart=0x0) returned 0x2d [0032.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\J0qv3USKLP3dP.mp3.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\J0qv3USKLP3dP.mp3.Lime", lpFilePart=0x0) returned 0x33 [0032.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\k-A8bMhygAuC.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\k-A8bMhygAuC.xlsx.Lime", lpFilePart=0x0) returned 0x33 [0032.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf.Lime", lpFilePart=0x0) returned 0x36 [0033.001] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.001] FindNextFileW (in: hFindFile=0x4dc6d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.001] FindClose (in: hFindFile=0x4dc6d8 | out: hFindFile=0x4dc6d8) returned 1 [0033.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", lpFilePart=0x0) returned 0x31 [0033.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", lpFilePart=0x0) returned 0x31 [0033.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", lpFilePart=0x0) returned 0x31 [0033.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", lpFilePart=0x0) returned 0x31 [0033.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0033.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\m6mihhsyl_m5kam0.swf"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ff0810, ftCreationTime.dwHighDateTime=0x1d34b64, ftLastAccessTime.dwLowDateTime=0x8a06fde0, ftLastAccessTime.dwHighDateTime=0x1d34d9b, ftLastWriteTime.dwLowDateTime=0x8a06fde0, ftLastWriteTime.dwHighDateTime=0x1d34d9b, nFileSizeHigh=0x0, nFileSizeLow=0x129dd)) returned 1 [0033.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0033.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0033.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", lpFilePart=0x0) returned 0x31 [0033.002] GetFullPathNameW (in: lpFileName="m6MihhsYl_M5kam0.swf", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", lpFilePart=0x0) returned 0x31 [0033.002] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc218 [0033.002] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0033.002] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0033.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0033.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0033.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", lpFilePart=0x0) returned 0x31 [0033.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", lpFilePart=0x0) returned 0x31 [0033.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", lpFilePart=0x0) returned 0x31 [0033.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0033.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\m6mihhsyl_m5kam0.swf"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ff0810, ftCreationTime.dwHighDateTime=0x1d34b64, ftLastAccessTime.dwLowDateTime=0x8a06fde0, ftLastAccessTime.dwHighDateTime=0x1d34d9b, ftLastWriteTime.dwLowDateTime=0x8a06fde0, ftLastWriteTime.dwHighDateTime=0x1d34d9b, nFileSizeHigh=0x0, nFileSizeLow=0x129dd)) returned 1 [0033.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0033.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf", lpFilePart=0x0) returned 0x31 [0033.003] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\m6MihhsYl_M5kam0.swf" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\m6mihhsyl_m5kam0.swf")) returned 1 [0033.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70fef027, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70fef027, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70fef027, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70fef027, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.004] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0033.004] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc1d8 [0033.004] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.004] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0033.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.005] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc598 [0033.005] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.005] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.005] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.005] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.005] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.005] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.005] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.005] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.005] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.006] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.006] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.006] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.006] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.006] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.006] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.006] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.006] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.006] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.006] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.006] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.006] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.006] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.007] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.007] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.007] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.007] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.007] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.007] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.007] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.007] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.007] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.007] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.007] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.008] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.008] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.008] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.008] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.008] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.008] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0033.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0033.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70fef027, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70fef027, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x70fef027, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70fef027, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.009] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0033.009] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc298 [0033.009] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.009] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0033.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.009] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc898 [0033.009] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.009] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.009] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.009] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.010] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.010] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.010] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.010] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.010] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.010] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.010] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.010] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.010] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.010] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.010] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.010] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.010] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.010] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.011] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.011] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.011] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.011] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.011] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.011] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.011] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.011] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.011] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.011] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.011] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.011] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.011] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.012] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.012] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.012] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.012] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.012] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.012] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.012] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.012] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0033.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", lpFilePart=0x0) returned 0x34 [0033.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0033.012] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\makfq5zaptizrce7iru.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0033.012] GetFileType (hFile=0x2c8) returned 0x1 [0033.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0033.012] GetFileType (hFile=0x2c8) returned 0x1 [0033.012] GetFileSize (in: hFile=0x2c8, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0xda5b [0033.012] ReadFile (in: hFile=0x2c8, lpBuffer=0x20476c0, nNumberOfBytesToRead=0xda5b, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x20476c0*, lpNumberOfBytesRead=0x33e984*=0xda5b, lpOverlapped=0x0) returned 1 [0033.013] CloseHandle (hObject=0x2c8) returned 1 [0033.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods.Lime", lpFilePart=0x0) returned 0x39 [0033.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0033.014] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods.Lime" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\makfq5zaptizrce7iru.ods.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0033.014] GetFileType (hFile=0x2c8) returned 0x1 [0033.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0033.014] GetFileType (hFile=0x2c8) returned 0x1 [0033.014] WriteFile (in: hFile=0x2c8, lpBuffer=0x20556dc*, nNumberOfBytesToWrite=0xda60, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20556dc*, lpNumberOfBytesWritten=0x33e974*=0xda60, lpOverlapped=0x0) returned 1 [0033.015] CloseHandle (hObject=0x2c8) returned 1 [0033.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x710152e6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x710152e6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x710152e6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x710152e6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.017] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0033.017] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc1d8 [0033.017] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.017] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0033.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.018] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc8d8 [0033.018] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.018] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.018] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.018] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.018] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.018] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.018] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.018] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.019] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.019] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.019] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.019] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.019] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.019] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.019] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.019] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.019] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.019] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.019] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.019] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.019] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.020] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.020] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.020] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.020] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.020] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.020] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.020] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.020] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.020] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.020] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.020] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.020] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.020] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.021] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.021] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.021] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.021] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.021] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.021] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0033.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", lpFilePart=0x0) returned 0x34 [0033.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", lpFilePart=0x0) returned 0x34 [0033.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", lpFilePart=0x0) returned 0x34 [0033.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", lpFilePart=0x0) returned 0x34 [0033.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0033.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\makfq5zaptizrce7iru.ods"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2e1e00, ftCreationTime.dwHighDateTime=0x1d34d6b, ftLastAccessTime.dwLowDateTime=0xcfd58320, ftLastAccessTime.dwHighDateTime=0x1d3534d, ftLastWriteTime.dwLowDateTime=0xcfd58320, ftLastWriteTime.dwHighDateTime=0x1d3534d, nFileSizeHigh=0x0, nFileSizeLow=0xda5b)) returned 1 [0033.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0033.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0033.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", lpFilePart=0x0) returned 0x34 [0033.021] GetFullPathNameW (in: lpFileName="mAKFQ5ZAPTIzrcE7IrU.ods", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", lpFilePart=0x0) returned 0x34 [0033.021] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc898 [0033.022] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0033.022] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0033.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0033.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0033.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", lpFilePart=0x0) returned 0x34 [0033.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", lpFilePart=0x0) returned 0x34 [0033.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", lpFilePart=0x0) returned 0x34 [0033.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0033.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\makfq5zaptizrce7iru.ods"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2e1e00, ftCreationTime.dwHighDateTime=0x1d34d6b, ftLastAccessTime.dwLowDateTime=0xcfd58320, ftLastAccessTime.dwHighDateTime=0x1d3534d, ftLastWriteTime.dwLowDateTime=0xcfd58320, ftLastWriteTime.dwHighDateTime=0x1d3534d, nFileSizeHigh=0x0, nFileSizeLow=0xda5b)) returned 1 [0033.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0033.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods", lpFilePart=0x0) returned 0x34 [0033.022] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mAKFQ5ZAPTIzrcE7IrU.ods" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\makfq5zaptizrce7iru.ods")) returned 1 [0033.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7103b4d6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7103b4d6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7103b4d6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7103b4d6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.024] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0033.024] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc418 [0033.024] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.024] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0033.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.024] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc2d8 [0033.024] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.024] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.024] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.024] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.024] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.024] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.024] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.024] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.025] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.025] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0033.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0033.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7103b4d6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7103b4d6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7103b4d6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7103b4d6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.026] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0033.026] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc7d8 [0033.026] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.026] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0033.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.026] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc1d8 [0033.026] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.026] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.026] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.027] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.027] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0033.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.027] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", lpFilePart=0x0) returned 0x2c [0033.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0033.028] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\mv3nggj4w65.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0033.028] GetFileType (hFile=0x2c8) returned 0x1 [0033.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0033.028] GetFileType (hFile=0x2c8) returned 0x1 [0033.028] GetFileSize (in: hFile=0x2c8, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x5e36 [0033.028] ReadFile (in: hFile=0x2c8, lpBuffer=0x2078a08, nNumberOfBytesToRead=0x5e36, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x2078a08*, lpNumberOfBytesRead=0x33e984*=0x5e36, lpOverlapped=0x0) returned 1 [0033.028] CloseHandle (hObject=0x2c8) returned 1 [0033.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png.Lime", lpFilePart=0x0) returned 0x31 [0033.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0033.029] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png.Lime" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\mv3nggj4w65.png.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0033.029] GetFileType (hFile=0x2c8) returned 0x1 [0033.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0033.029] GetFileType (hFile=0x2c8) returned 0x1 [0033.029] WriteFile (in: hFile=0x2c8, lpBuffer=0x207edf4*, nNumberOfBytesToWrite=0x5e40, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x207edf4*, lpNumberOfBytesWritten=0x33e974*=0x5e40, lpOverlapped=0x0) returned 1 [0033.030] CloseHandle (hObject=0x2c8) returned 1 [0033.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7103b4d6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7103b4d6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7103b4d6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7103b4d6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.031] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0033.031] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc898 [0033.031] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.031] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0033.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.032] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc798 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.032] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.033] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.033] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.033] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.033] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.033] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0033.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", lpFilePart=0x0) returned 0x2c [0033.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", lpFilePart=0x0) returned 0x2c [0033.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", lpFilePart=0x0) returned 0x2c [0033.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", lpFilePart=0x0) returned 0x2c [0033.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0033.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\mv3nggj4w65.png"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bd8790, ftCreationTime.dwHighDateTime=0x1d3548c, ftLastAccessTime.dwLowDateTime=0x4a09210, ftLastAccessTime.dwHighDateTime=0x1d34e18, ftLastWriteTime.dwLowDateTime=0x4a09210, ftLastWriteTime.dwHighDateTime=0x1d34e18, nFileSizeHigh=0x0, nFileSizeLow=0x5e36)) returned 1 [0033.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0033.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0033.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", lpFilePart=0x0) returned 0x2c [0033.033] GetFullPathNameW (in: lpFileName="mV3NggJ4W65.png", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", lpFilePart=0x0) returned 0x2c [0033.033] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc3d8 [0033.033] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0033.033] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0033.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0033.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0033.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", lpFilePart=0x0) returned 0x2c [0033.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", lpFilePart=0x0) returned 0x2c [0033.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", lpFilePart=0x0) returned 0x2c [0033.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0033.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\mv3nggj4w65.png"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bd8790, ftCreationTime.dwHighDateTime=0x1d3548c, ftLastAccessTime.dwLowDateTime=0x4a09210, ftLastAccessTime.dwHighDateTime=0x1d34e18, ftLastWriteTime.dwLowDateTime=0x4a09210, ftLastWriteTime.dwHighDateTime=0x1d34e18, nFileSizeHigh=0x0, nFileSizeLow=0x5e36)) returned 1 [0033.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0033.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png", lpFilePart=0x0) returned 0x2c [0033.034] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\mV3NggJ4W65.png" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\mv3nggj4w65.png")) returned 1 [0033.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7103b4d6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7103b4d6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x7103b4d6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7103b4d6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0033.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0033.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0033.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0033.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0033.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0033.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0033.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0033.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0033.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0033.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0033.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0033.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0033.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0033.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0033.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0033.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0033.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0033.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0033.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0033.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0033.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0033.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0033.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0033.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0033.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0033.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0033.090] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.090] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.090] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.090] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.090] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.090] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.090] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.090] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.090] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.090] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.091] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.091] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.091] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.091] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.091] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.091] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.091] FindNextFileW (in: hFindFile=0x4dc418, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.091] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0033.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", lpFilePart=0x0) returned 0x32 [0033.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", lpFilePart=0x0) returned 0x32 [0033.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", lpFilePart=0x0) returned 0x32 [0033.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", lpFilePart=0x0) returned 0x32 [0033.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0033.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\villubaagv2dsjk7a.png"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x644103d0, ftCreationTime.dwHighDateTime=0x1d350ed, ftLastAccessTime.dwLowDateTime=0xc4abfd80, ftLastAccessTime.dwHighDateTime=0x1d35820, ftLastWriteTime.dwLowDateTime=0xc4abfd80, ftLastWriteTime.dwHighDateTime=0x1d35820, nFileSizeHigh=0x0, nFileSizeLow=0xe28a)) returned 1 [0033.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0033.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0033.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", lpFilePart=0x0) returned 0x32 [0033.092] GetFullPathNameW (in: lpFileName="ViLLuBaagV2DSJK7a.png", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", lpFilePart=0x0) returned 0x32 [0033.092] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc2d8 [0033.092] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0033.092] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0033.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0033.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0033.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", lpFilePart=0x0) returned 0x32 [0033.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", lpFilePart=0x0) returned 0x32 [0033.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", lpFilePart=0x0) returned 0x32 [0033.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0033.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\villubaagv2dsjk7a.png"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x644103d0, ftCreationTime.dwHighDateTime=0x1d350ed, ftLastAccessTime.dwLowDateTime=0xc4abfd80, ftLastAccessTime.dwHighDateTime=0x1d35820, ftLastWriteTime.dwLowDateTime=0xc4abfd80, ftLastWriteTime.dwHighDateTime=0x1d35820, nFileSizeHigh=0x0, nFileSizeLow=0xe28a)) returned 1 [0033.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0033.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png", lpFilePart=0x0) returned 0x32 [0033.092] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\ViLLuBaagV2DSJK7a.png" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\villubaagv2dsjk7a.png")) returned 1 [0033.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x710dc43a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x710dc43a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x710dc43a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x710dc43a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.094] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0033.094] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc218 [0033.094] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.094] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0033.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.095] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc798 [0033.095] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.095] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.095] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.095] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.095] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.095] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.095] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.095] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.095] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.095] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.096] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.096] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.096] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.096] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.096] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.096] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.096] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.096] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.096] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.096] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.096] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.096] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.096] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.097] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.097] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.097] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.097] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.097] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.097] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.097] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.097] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.097] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.097] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.097] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.097] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.097] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.098] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.098] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.098] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0033.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0033.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x710dc43a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x710dc43a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x710dc43a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x710dc43a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.098] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0033.098] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc1d8 [0033.099] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.099] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0033.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.099] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc1d8 [0033.099] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.099] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.099] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.099] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.099] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.100] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.100] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.100] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.100] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.100] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.100] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.100] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.100] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.100] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.100] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.100] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.101] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.101] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.101] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.101] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.101] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.101] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.101] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.101] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.101] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.101] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.101] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.102] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.102] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.102] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.102] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.102] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.102] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.102] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.102] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.102] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.102] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.102] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.102] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0033.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", lpFilePart=0x0) returned 0x2c [0033.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0033.103] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\wvjrcaiyskl.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0033.103] GetFileType (hFile=0x2c8) returned 0x1 [0033.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0033.103] GetFileType (hFile=0x2c8) returned 0x1 [0033.103] GetFileSize (in: hFile=0x2c8, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0x5097 [0033.103] ReadFile (in: hFile=0x2c8, lpBuffer=0x2049a08, nNumberOfBytesToRead=0x5097, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x2049a08*, lpNumberOfBytesRead=0x33e984*=0x5097, lpOverlapped=0x0) returned 1 [0033.103] CloseHandle (hObject=0x2c8) returned 1 [0033.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg.Lime", lpFilePart=0x0) returned 0x31 [0033.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0033.104] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg.Lime" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\wvjrcaiyskl.jpg.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0033.105] GetFileType (hFile=0x2c8) returned 0x1 [0033.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0033.105] GetFileType (hFile=0x2c8) returned 0x1 [0033.105] WriteFile (in: hFile=0x2c8, lpBuffer=0x204f054*, nNumberOfBytesToWrite=0x50a0, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x204f054*, lpNumberOfBytesWritten=0x33e974*=0x50a0, lpOverlapped=0x0) returned 1 [0033.105] CloseHandle (hObject=0x2c8) returned 1 [0033.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x710fa108, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x710fa108, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x710fa108, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x710fa108, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.107] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0033.107] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc298 [0033.107] FindNextFileW (in: hFindFile=0x4dc298, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.107] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0033.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.108] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc4d8 [0033.108] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.108] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.108] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.108] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.108] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.108] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.108] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.111] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.111] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.111] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.111] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.111] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.111] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.111] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0033.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", lpFilePart=0x0) returned 0x2c [0033.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", lpFilePart=0x0) returned 0x2c [0033.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", nBufferLength=0x105, lpBuffer=0x33e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", lpFilePart=0x0) returned 0x2c [0033.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", lpFilePart=0x0) returned 0x2c [0033.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0033.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\wvjrcaiyskl.jpg"), fInfoLevelId=0x0, lpFileInformation=0x33e97c | out: lpFileInformation=0x33e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b123730, ftCreationTime.dwHighDateTime=0x1d352a2, ftLastAccessTime.dwLowDateTime=0x3aacef50, ftLastAccessTime.dwHighDateTime=0x1d35482, ftLastWriteTime.dwLowDateTime=0x3aacef50, ftLastWriteTime.dwHighDateTime=0x1d35482, nFileSizeHigh=0x0, nFileSizeLow=0x5097)) returned 1 [0033.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0033.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0033.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", lpFilePart=0x0) returned 0x2c [0033.111] GetFullPathNameW (in: lpFileName="wVjrCaIySkl.jpg", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", lpFilePart=0x0) returned 0x2c [0033.111] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", lpFindFileData=0x33e68c | out: lpFindFileData=0x33e68c) returned 0x4dc458 [0033.111] FindNextFileW (in: hFindFile=0x4dc458, lpFindFileData=0x33e69c | out: lpFindFileData=0x33e69c) returned 0 [0033.111] FindClose (in: hFindFile=0x4dc458 | out: hFindFile=0x4dc458) returned 1 [0033.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0033.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0033.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", nBufferLength=0x105, lpBuffer=0x33e414, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", lpFilePart=0x0) returned 0x2c [0033.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", lpFilePart=0x0) returned 0x2c [0033.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", lpFilePart=0x0) returned 0x2c [0033.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0033.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\wvjrcaiyskl.jpg"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b123730, ftCreationTime.dwHighDateTime=0x1d352a2, ftLastAccessTime.dwLowDateTime=0x3aacef50, ftLastAccessTime.dwHighDateTime=0x1d35482, ftLastWriteTime.dwLowDateTime=0x3aacef50, ftLastWriteTime.dwHighDateTime=0x1d35482, nFileSizeHigh=0x0, nFileSizeLow=0x5097)) returned 1 [0033.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0033.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", nBufferLength=0x105, lpBuffer=0x33e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg", lpFilePart=0x0) returned 0x2c [0033.112] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\wVjrCaIySkl.jpg" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\wvjrcaiyskl.jpg")) returned 1 [0033.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x710fa108, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x710fa108, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x710fa108, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x710fa108, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.113] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0033.113] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc8d8 [0033.113] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.113] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0033.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.114] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc898 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.114] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.115] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.115] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.115] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.115] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.115] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.115] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.115] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.115] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0033.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0033.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x710fa108, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x710fa108, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x710fa108, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x710fa108, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.115] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0033.115] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc918 [0033.115] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.115] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0033.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.116] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc558 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.116] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.117] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.117] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.117] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.117] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.117] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.117] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.117] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.117] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.117] FindNextFileW (in: hFindFile=0x4dc558, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.117] FindClose (in: hFindFile=0x4dc558 | out: hFindFile=0x4dc558) returned 1 [0033.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\xCdHr9FnegVb5D0.pdf", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\xCdHr9FnegVb5D0.pdf", lpFilePart=0x0) returned 0x30 [0033.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0033.117] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\xCdHr9FnegVb5D0.pdf" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\xcdhr9fnegvb5d0.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0033.117] GetFileType (hFile=0x2c8) returned 0x1 [0033.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0033.117] GetFileType (hFile=0x2c8) returned 0x1 [0033.117] GetFileSize (in: hFile=0x2c8, lpFileSizeHigh=0x33e9d8 | out: lpFileSizeHigh=0x33e9d8*=0x0) returned 0xd41 [0033.117] ReadFile (in: hFile=0x2c8, lpBuffer=0x206aa0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x33e984, lpOverlapped=0x0 | out: lpBuffer=0x206aa0c*, lpNumberOfBytesRead=0x33e984*=0xd41, lpOverlapped=0x0) returned 1 [0033.117] CloseHandle (hObject=0x2c8) returned 1 [0033.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\xCdHr9FnegVb5D0.pdf.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\xCdHr9FnegVb5D0.pdf.Lime", lpFilePart=0x0) returned 0x35 [0033.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0033.118] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\xCdHr9FnegVb5D0.pdf.Lime" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\xcdhr9fnegvb5d0.pdf.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0033.118] GetFileType (hFile=0x2c8) returned 0x1 [0033.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0033.118] GetFileType (hFile=0x2c8) returned 0x1 [0033.118] WriteFile (in: hFile=0x2c8, lpBuffer=0x206ce5c*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x206ce5c*, lpNumberOfBytesWritten=0x33e948*=0xd50, lpOverlapped=0x0) returned 1 [0033.119] CloseHandle (hObject=0x2c8) returned 1 [0033.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x71120386, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x71120386, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x71120386, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x71120386, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.120] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0033.120] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc7d8 [0033.120] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.120] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0033.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.121] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc898 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.121] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.122] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.122] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.122] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0033.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0033.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0033.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0033.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0033.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0033.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0033.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0033.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d0) returned 1 [0033.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\xDFY_8B_sJ0.mp3.Lime", nBufferLength=0x105, lpBuffer=0x33e3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\xDFY_8B_sJ0.mp3.Lime", lpFilePart=0x0) returned 0x31 [0033.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8bc) returned 1 [0033.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8b8) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e900) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8fc) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e964) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e924) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e930) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0033.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0033.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0033.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0033.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0033.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0033.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0033.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\1Nmr10XM2 qXtTP.mp4.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\1Nmr10XM2 qXtTP.mp4.Lime", lpFilePart=0x0) returned 0x40 [0033.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0033.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0033.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0033.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0033.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0033.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0033.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0033.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0033.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0033.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0033.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0033.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0033.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0033.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0033.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0033.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0033.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0033.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0033.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0033.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0033.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0033.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0033.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0033.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0033.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0033.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0033.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\93VRfaRfOxp3CPCTJh.wav.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\93VRfaRfOxp3CPCTJh.wav.Lime", lpFilePart=0x0) returned 0x43 [0033.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0033.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0033.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0033.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0033.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0033.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0033.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0033.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0033.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0033.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\ck_AZSi 8h7Gk.m4a.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\ck_AZSi 8h7Gk.m4a.Lime", lpFilePart=0x0) returned 0x3e [0033.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc.Lime", lpFilePart=0x0) returned 0x3b [0033.149] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0033.150] FindClose (in: hFindFile=0x4dc418 | out: hFindFile=0x4dc418) returned 1 [0033.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", lpFilePart=0x0) returned 0x36 [0033.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", lpFilePart=0x0) returned 0x36 [0033.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", lpFilePart=0x0) returned 0x36 [0033.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", lpFilePart=0x0) returned 0x36 [0033.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts\\gnoveg6hpj.doc"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f089c0, ftCreationTime.dwHighDateTime=0x1d34ceb, ftLastAccessTime.dwLowDateTime=0xb43b2080, ftLastAccessTime.dwHighDateTime=0x1d3593c, ftLastWriteTime.dwLowDateTime=0xb43b2080, ftLastWriteTime.dwHighDateTime=0x1d3593c, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8)) returned 1 [0033.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", lpFilePart=0x0) returned 0x36 [0033.150] GetFullPathNameW (in: lpFileName="gnOVeG6HPj.doc", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\gnOVeG6HPj.doc", lpFilePart=0x0) returned 0x2b [0033.151] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc898 [0033.151] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0033.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", lpFilePart=0x0) returned 0x36 [0033.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", lpFilePart=0x0) returned 0x36 [0033.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", lpFilePart=0x0) returned 0x36 [0033.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts\\gnoveg6hpj.doc"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f089c0, ftCreationTime.dwHighDateTime=0x1d34ceb, ftLastAccessTime.dwLowDateTime=0xb43b2080, ftLastAccessTime.dwHighDateTime=0x1d3593c, ftLastWriteTime.dwLowDateTime=0xb43b2080, ftLastWriteTime.dwHighDateTime=0x1d3593c, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8)) returned 1 [0033.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc", lpFilePart=0x0) returned 0x36 [0033.151] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\gnOVeG6HPj.doc" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts\\gnoveg6hpj.doc")) returned 1 [0033.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52d8aa70, ftCreationTime.dwHighDateTime=0x1d35459, ftLastAccessTime.dwLowDateTime=0x7116c840, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7116c840, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0033.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52d8aa70, ftCreationTime.dwHighDateTime=0x1d35459, ftLastAccessTime.dwLowDateTime=0x7116c840, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7116c840, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0033.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.153] GetFullPathNameW (in: lpFileName="c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.153] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc2d8 [0033.153] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0033.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\", lpFilePart=0x0) returned 0x28 [0033.153] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc298 [0033.154] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0033.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0033.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52d8aa70, ftCreationTime.dwHighDateTime=0x1d35459, ftLastAccessTime.dwLowDateTime=0x7116c840, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7116c840, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0033.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52d8aa70, ftCreationTime.dwHighDateTime=0x1d35459, ftLastAccessTime.dwLowDateTime=0x7116c840, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7116c840, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0033.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.155] GetFullPathNameW (in: lpFileName="c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.155] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc7d8 [0033.155] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0033.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\", lpFilePart=0x0) returned 0x28 [0033.155] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc1d8 [0033.156] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0033.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", lpFilePart=0x0) returned 0x40 [0033.156] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts\\hv1siahr-wdxqnisdtes.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0033.156] GetFileType (hFile=0x2c8) returned 0x1 [0033.156] GetFileType (hFile=0x2c8) returned 0x1 [0033.156] GetFileSize (in: hFile=0x2c8, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0xa574 [0033.156] ReadFile (in: hFile=0x2c8, lpBuffer=0x213b240, nNumberOfBytesToRead=0xa574, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x213b240*, lpNumberOfBytesRead=0x33e948*=0xa574, lpOverlapped=0x0) returned 1 [0033.156] CloseHandle (hObject=0x2c8) returned 1 [0033.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a.Lime", lpFilePart=0x0) returned 0x45 [0033.158] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a.Lime" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts\\hv1siahr-wdxqnisdtes.m4a.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0033.158] GetFileType (hFile=0x2c8) returned 0x1 [0033.158] GetFileType (hFile=0x2c8) returned 0x1 [0033.158] WriteFile (in: hFile=0x2c8, lpBuffer=0x2145d90*, nNumberOfBytesToWrite=0xa580, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x2145d90*, lpNumberOfBytesWritten=0x33e938*=0xa580, lpOverlapped=0x0) returned 1 [0033.159] CloseHandle (hObject=0x2c8) returned 1 [0033.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52d8aa70, ftCreationTime.dwHighDateTime=0x1d35459, ftLastAccessTime.dwLowDateTime=0x7116c840, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7116c840, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0033.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52d8aa70, ftCreationTime.dwHighDateTime=0x1d35459, ftLastAccessTime.dwLowDateTime=0x7116c840, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7116c840, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0033.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.160] GetFullPathNameW (in: lpFileName="c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.160] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc4d8 [0033.161] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0033.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\", lpFilePart=0x0) returned 0x28 [0033.161] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc358 [0033.162] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0033.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", nBufferLength=0x105, lpBuffer=0x33e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", lpFilePart=0x0) returned 0x40 [0033.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", lpFilePart=0x0) returned 0x40 [0033.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", nBufferLength=0x105, lpBuffer=0x33e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", lpFilePart=0x0) returned 0x40 [0033.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", nBufferLength=0x105, lpBuffer=0x33e444, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", lpFilePart=0x0) returned 0x40 [0033.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts\\hv1siahr-wdxqnisdtes.m4a"), fInfoLevelId=0x0, lpFileInformation=0x33e940 | out: lpFileInformation=0x33e940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ec3530, ftCreationTime.dwHighDateTime=0x1d359dd, ftLastAccessTime.dwLowDateTime=0x3b5dee40, ftLastAccessTime.dwHighDateTime=0x1d351ad, ftLastWriteTime.dwLowDateTime=0x3b5dee40, ftLastWriteTime.dwHighDateTime=0x1d351ad, nFileSizeHigh=0x0, nFileSizeLow=0xa574)) returned 1 [0033.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", lpFilePart=0x0) returned 0x40 [0033.162] GetFullPathNameW (in: lpFileName="HV1SiahR-wDxQNIsDtes.m4a", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\HV1SiahR-wDxQNIsDtes.m4a", lpFilePart=0x0) returned 0x35 [0033.162] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc8d8 [0033.163] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0033.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", nBufferLength=0x105, lpBuffer=0x33e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", lpFilePart=0x0) returned 0x40 [0033.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", lpFilePart=0x0) returned 0x40 [0033.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", nBufferLength=0x105, lpBuffer=0x33e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", lpFilePart=0x0) returned 0x40 [0033.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts\\hv1siahr-wdxqnisdtes.m4a"), fInfoLevelId=0x0, lpFileInformation=0x33e978 | out: lpFileInformation=0x33e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ec3530, ftCreationTime.dwHighDateTime=0x1d359dd, ftLastAccessTime.dwLowDateTime=0x3b5dee40, ftLastAccessTime.dwHighDateTime=0x1d351ad, ftLastWriteTime.dwLowDateTime=0x3b5dee40, ftLastWriteTime.dwHighDateTime=0x1d351ad, nFileSizeHigh=0x0, nFileSizeLow=0xa574)) returned 1 [0033.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", nBufferLength=0x105, lpBuffer=0x33e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a", lpFilePart=0x0) returned 0x40 [0033.163] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\HV1SiahR-wDxQNIsDtes.m4a" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts\\hv1siahr-wdxqnisdtes.m4a")) returned 1 [0033.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52d8aa70, ftCreationTime.dwHighDateTime=0x1d35459, ftLastAccessTime.dwLowDateTime=0x71192a05, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x71192a05, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0033.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52d8aa70, ftCreationTime.dwHighDateTime=0x1d35459, ftLastAccessTime.dwLowDateTime=0x71192a05, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x71192a05, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0033.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.164] GetFullPathNameW (in: lpFileName="c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.165] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc918 [0033.165] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0033.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\", lpFilePart=0x0) returned 0x28 [0033.165] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc598 [0033.166] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0033.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0033.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52d8aa70, ftCreationTime.dwHighDateTime=0x1d35459, ftLastAccessTime.dwLowDateTime=0x71192a05, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x71192a05, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0033.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52d8aa70, ftCreationTime.dwHighDateTime=0x1d35459, ftLastAccessTime.dwLowDateTime=0x71192a05, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x71192a05, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0033.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.166] GetFullPathNameW (in: lpFileName="c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.167] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc618 [0033.167] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0033.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\.", nBufferLength=0x105, lpBuffer=0x33e3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFilePart=0x0) returned 0x27 [0033.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\", nBufferLength=0x105, lpBuffer=0x33e3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\", lpFilePart=0x0) returned 0x28 [0033.167] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc598 [0033.168] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0033.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\pYMw3_PCgqt55k.wav.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\pYMw3_PCgqt55k.wav.Lime", lpFilePart=0x0) returned 0x3f [0033.170] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc598 [0033.170] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0033.170] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc8d8 [0033.171] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0033.171] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\pYMw3_PCgqt55k.wav", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc8d8 [0033.171] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0033.172] FindClose (in: hFindFile=0x4dc298 | out: hFindFile=0x4dc298) returned 1 [0033.173] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0033.173] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0033.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\uMTuMhzETvvBCpi.m4a.Lime", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\uMTuMhzETvvBCpi.m4a.Lime", lpFilePart=0x0) returned 0x40 [0033.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\kR da91gNC.jpg.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\kR da91gNC.jpg.Lime", lpFilePart=0x0) returned 0x40 [0033.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\PBBbJ_JIK.m4a.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\PBBbJ_JIK.m4a.Lime", lpFilePart=0x0) returned 0x3f [0033.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\xsDGgQmS1AIPpx.m4a.Lime", nBufferLength=0x105, lpBuffer=0x33e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\xsDGgQmS1AIPpx.m4a.Lime", lpFilePart=0x0) returned 0x44 [0033.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\YDEISMKcp0eBb31.png.Lime", nBufferLength=0x105, lpBuffer=0x33e2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\YDEISMKcp0eBb31.png.Lime", lpFilePart=0x0) returned 0x53 [0033.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png.Lime", nBufferLength=0x105, lpBuffer=0x33e2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png.Lime", lpFilePart=0x0) returned 0x48 [0033.201] GetFullPathNameW (in: lpFileName="3gLjWk8Dnbmky", nBufferLength=0x105, lpBuffer=0x33e338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\3gLjWk8Dnbmky", lpFilePart=0x0) returned 0x2a [0033.201] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", lpFindFileData=0x33e5bc | out: lpFindFileData=0x33e5bc) returned 0x4dc2d8 [0033.201] FindNextFileW (in: hFindFile=0x4dc2d8, lpFindFileData=0x33e5cc | out: lpFindFileData=0x33e5cc) returned 0 [0033.201] FindClose (in: hFindFile=0x4dc2d8 | out: hFindFile=0x4dc2d8) returned 1 [0033.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e854) returned 1 [0033.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e860) returned 1 [0033.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\.", nBufferLength=0x105, lpBuffer=0x33e344, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", lpFilePart=0x0) returned 0x3a [0033.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c8) returned 1 [0033.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", lpFilePart=0x0) returned 0x3a [0033.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\", lpFilePart=0x0) returned 0x3b [0033.201] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\*", lpFindFileData=0x33e5f0 | out: lpFindFileData=0x33e5f0) returned 0x4dc8d8 [0033.202] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e600 | out: lpFindFileData=0x33e600) returned 1 [0033.202] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e600 | out: lpFindFileData=0x33e600) returned 1 [0033.202] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e600 | out: lpFindFileData=0x33e600) returned 1 [0033.202] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e600 | out: lpFindFileData=0x33e600) returned 1 [0033.202] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e600 | out: lpFindFileData=0x33e600) returned 0 [0033.202] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0033.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e888) returned 1 [0033.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0033.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", nBufferLength=0x105, lpBuffer=0x33e408, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", lpFilePart=0x0) returned 0x43 [0033.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", nBufferLength=0x105, lpBuffer=0x33e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", lpFilePart=0x0) returned 0x43 [0033.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", nBufferLength=0x105, lpBuffer=0x33e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", lpFilePart=0x0) returned 0x43 [0033.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", nBufferLength=0x105, lpBuffer=0x33e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", lpFilePart=0x0) returned 0x3a [0033.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", nBufferLength=0x105, lpBuffer=0x33e3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", lpFilePart=0x0) returned 0x43 [0033.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e84c) returned 1 [0033.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts\\3zph\\3gljwk8dnbmky\\_epx.png"), fInfoLevelId=0x0, lpFileInformation=0x33e8c8 | out: lpFileInformation=0x33e8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40c1ca00, ftCreationTime.dwHighDateTime=0x1d35964, ftLastAccessTime.dwLowDateTime=0x886164f0, ftLastAccessTime.dwHighDateTime=0x1d357f3, ftLastWriteTime.dwLowDateTime=0x886164f0, ftLastWriteTime.dwHighDateTime=0x1d357f3, nFileSizeHigh=0x0, nFileSizeLow=0x10d97)) returned 1 [0033.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e848) returned 1 [0033.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8b0) returned 1 [0033.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", nBufferLength=0x105, lpBuffer=0x33e398, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", lpFilePart=0x0) returned 0x3a [0033.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", nBufferLength=0x105, lpBuffer=0x33e354, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", lpFilePart=0x0) returned 0x43 [0033.203] GetFullPathNameW (in: lpFileName="_epX.png", nBufferLength=0x105, lpBuffer=0x33e354, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_epX.png", lpFilePart=0x0) returned 0x25 [0033.203] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", lpFindFileData=0x33e5d8 | out: lpFindFileData=0x33e5d8) returned 0x4dc358 [0033.203] FindNextFileW (in: hFindFile=0x4dc358, lpFindFileData=0x33e5e8 | out: lpFindFileData=0x33e5e8) returned 0 [0033.203] FindClose (in: hFindFile=0x4dc358 | out: hFindFile=0x4dc358) returned 1 [0033.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e870) returned 1 [0033.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0033.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", nBufferLength=0x105, lpBuffer=0x33e360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", lpFilePart=0x0) returned 0x43 [0033.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", nBufferLength=0x105, lpBuffer=0x33e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", lpFilePart=0x0) returned 0x43 [0033.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", nBufferLength=0x105, lpBuffer=0x33e404, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", lpFilePart=0x0) returned 0x43 [0033.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e884) returned 1 [0033.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts\\3zph\\3gljwk8dnbmky\\_epx.png"), fInfoLevelId=0x0, lpFileInformation=0x33e900 | out: lpFileInformation=0x33e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40c1ca00, ftCreationTime.dwHighDateTime=0x1d35964, ftLastAccessTime.dwLowDateTime=0x886164f0, ftLastAccessTime.dwHighDateTime=0x1d357f3, ftLastWriteTime.dwLowDateTime=0x886164f0, ftLastWriteTime.dwHighDateTime=0x1d357f3, nFileSizeHigh=0x0, nFileSizeLow=0x10d97)) returned 1 [0033.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e880) returned 1 [0033.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", nBufferLength=0x105, lpBuffer=0x33e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png", lpFilePart=0x0) returned 0x43 [0033.203] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\_epX.png" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts\\3zph\\3gljwk8dnbmky\\_epx.png")) returned 1 [0033.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", lpFilePart=0x0) returned 0x3a [0033.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", nBufferLength=0x105, lpBuffer=0x33e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", lpFilePart=0x0) returned 0x3a [0033.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", nBufferLength=0x105, lpBuffer=0x33e388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", lpFilePart=0x0) returned 0x3a [0033.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph", nBufferLength=0x105, lpBuffer=0x33e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph", lpFilePart=0x0) returned 0x2c [0033.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", lpFilePart=0x0) returned 0x3a [0033.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e830) returned 1 [0033.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts\\3zph\\3gljwk8dnbmky"), fInfoLevelId=0x0, lpFileInformation=0x33e8ac | out: lpFileInformation=0x33e8ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd214a60, ftCreationTime.dwHighDateTime=0x1d354ac, ftLastAccessTime.dwLowDateTime=0x711deff6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x711deff6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0033.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e82c) returned 1 [0033.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", lpFilePart=0x0) returned 0x3a [0033.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e824) returned 1 [0033.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\c opbv-sts\\3zph\\3gljwk8dnbmky"), fInfoLevelId=0x0, lpFileInformation=0x33e8a0 | out: lpFileInformation=0x33e8a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd214a60, ftCreationTime.dwHighDateTime=0x1d354ac, ftLastAccessTime.dwLowDateTime=0x711deff6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x711deff6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0033.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e820) returned 1 [0033.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e894) returned 1 [0033.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph", nBufferLength=0x105, lpBuffer=0x33e37c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph", lpFilePart=0x0) returned 0x2c [0033.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", nBufferLength=0x105, lpBuffer=0x33e338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", lpFilePart=0x0) returned 0x3a [0033.205] GetFullPathNameW (in: lpFileName="3gLjWk8Dnbmky", nBufferLength=0x105, lpBuffer=0x33e338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\3gLjWk8Dnbmky", lpFilePart=0x0) returned 0x2a [0033.205] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", lpFindFileData=0x33e5bc | out: lpFindFileData=0x33e5bc) returned 0x4dc218 [0033.205] FindNextFileW (in: hFindFile=0x4dc218, lpFindFileData=0x33e5cc | out: lpFindFileData=0x33e5cc) returned 0 [0033.205] FindClose (in: hFindFile=0x4dc218 | out: hFindFile=0x4dc218) returned 1 [0033.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e854) returned 1 [0033.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e860) returned 1 [0033.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\.", nBufferLength=0x105, lpBuffer=0x33e344, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", lpFilePart=0x0) returned 0x3a [0033.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c8) returned 1 [0033.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", nBufferLength=0x105, lpBuffer=0x33e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky", lpFilePart=0x0) returned 0x3a [0033.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\", nBufferLength=0x105, lpBuffer=0x33e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\", lpFilePart=0x0) returned 0x3b [0033.205] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\3zph\\3gLjWk8Dnbmky\\*", lpFindFileData=0x33e5f0 | out: lpFindFileData=0x33e5f0) returned 0x4dc7d8 [0033.205] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e600 | out: lpFindFileData=0x33e600) returned 1 [0033.205] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e600 | out: lpFindFileData=0x33e600) returned 1 [0033.205] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e600 | out: lpFindFileData=0x33e600) returned 1 [0033.206] FindNextFileW (in: hFindFile=0x4dc7d8, lpFindFileData=0x33e600 | out: lpFindFileData=0x33e600) returned 0 [0033.206] FindClose (in: hFindFile=0x4dc7d8 | out: hFindFile=0x4dc7d8) returned 1 [0033.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e888) returned 1 [0033.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0033.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x71120386, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x71120386, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop" (normalized: "c:\\users\\5jghkoaofdp\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x71120386, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x71120386, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0033.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.206] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Desktop", lpFilePart=0x0) returned 0x24 [0033.206] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc698 [0033.206] FindNextFileW (in: hFindFile=0x4dc698, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.206] FindClose (in: hFindFile=0x4dc698 | out: hFindFile=0x4dc698) returned 1 [0033.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\", lpFilePart=0x0) returned 0x1d [0033.207] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc918 [0033.207] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.207] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.207] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.207] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.207] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.207] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.207] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.208] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.208] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.208] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.208] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.208] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.208] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.208] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.208] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.208] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.208] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.208] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.209] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.209] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.209] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.209] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.209] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.209] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.209] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.209] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.209] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.209] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.210] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.210] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.210] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.210] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.210] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.210] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.210] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.210] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.210] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.210] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.211] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0033.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", lpFilePart=0x0) returned 0x30 [0033.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", lpFilePart=0x0) returned 0x30 [0033.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", lpFilePart=0x0) returned 0x30 [0033.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", lpFilePart=0x0) returned 0x30 [0033.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0033.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\rsvw596pft9dfxj qf8"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd7d94da0, ftCreationTime.dwHighDateTime=0x1d3532e, ftLastAccessTime.dwLowDateTime=0x4ca41a80, ftLastAccessTime.dwHighDateTime=0x1d3522f, ftLastWriteTime.dwLowDateTime=0x4ca41a80, ftLastWriteTime.dwHighDateTime=0x1d3522f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0033.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0033.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", lpFilePart=0x0) returned 0x30 [0033.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0033.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\rsvw596pft9dfxj qf8"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd7d94da0, ftCreationTime.dwHighDateTime=0x1d3532e, ftLastAccessTime.dwLowDateTime=0x4ca41a80, ftLastAccessTime.dwHighDateTime=0x1d3522f, ftLastWriteTime.dwLowDateTime=0x4ca41a80, ftLastWriteTime.dwHighDateTime=0x1d3522f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0033.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0033.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0033.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.211] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc8d8 [0033.211] FindNextFileW (in: hFindFile=0x4dc8d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0033.211] FindClose (in: hFindFile=0x4dc8d8 | out: hFindFile=0x4dc8d8) returned 1 [0033.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0033.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0033.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0033.212] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc498 [0033.212] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0033.212] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0033.212] FindNextFileW (in: hFindFile=0x4dc498, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0033.212] FindClose (in: hFindFile=0x4dc498 | out: hFindFile=0x4dc498) returned 1 [0033.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0033.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0033.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0033.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\rsvw596pft9dfxj qf8"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd7d94da0, ftCreationTime.dwHighDateTime=0x1d3532e, ftLastAccessTime.dwLowDateTime=0x4ca41a80, ftLastAccessTime.dwHighDateTime=0x1d3522f, ftLastWriteTime.dwLowDateTime=0x4ca41a80, ftLastWriteTime.dwHighDateTime=0x1d3522f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0033.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0033.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0033.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\rsvw596pft9dfxj qf8"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd7d94da0, ftCreationTime.dwHighDateTime=0x1d3532e, ftLastAccessTime.dwLowDateTime=0x4ca41a80, ftLastAccessTime.dwHighDateTime=0x1d3522f, ftLastWriteTime.dwLowDateTime=0x4ca41a80, ftLastWriteTime.dwHighDateTime=0x1d3522f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0033.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0033.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0033.213] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc918 [0033.213] FindNextFileW (in: hFindFile=0x4dc918, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0033.213] FindClose (in: hFindFile=0x4dc918 | out: hFindFile=0x4dc918) returned 1 [0033.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0033.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0033.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0033.213] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc598 [0033.213] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0033.213] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0033.213] FindNextFileW (in: hFindFile=0x4dc598, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0033.213] FindClose (in: hFindFile=0x4dc598 | out: hFindFile=0x4dc598) returned 1 [0033.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0033.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0033.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0033.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\rsvw596pft9dfxj qf8"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd7d94da0, ftCreationTime.dwHighDateTime=0x1d3532e, ftLastAccessTime.dwLowDateTime=0x4ca41a80, ftLastAccessTime.dwHighDateTime=0x1d3522f, ftLastWriteTime.dwLowDateTime=0x4ca41a80, ftLastWriteTime.dwHighDateTime=0x1d3522f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0033.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0033.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0033.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\rsvw596pft9dfxj qf8"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd7d94da0, ftCreationTime.dwHighDateTime=0x1d3532e, ftLastAccessTime.dwLowDateTime=0x4ca41a80, ftLastAccessTime.dwHighDateTime=0x1d3522f, ftLastWriteTime.dwLowDateTime=0x4ca41a80, ftLastWriteTime.dwHighDateTime=0x1d3522f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0033.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0033.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0033.214] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc798 [0033.214] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0033.214] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0033.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0033.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0033.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0033.214] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc1d8 [0033.214] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0033.215] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0033.215] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0033.215] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0033.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0033.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0033.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0033.215] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8\\7mq72DdMZjhMf.jpg" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\rsvw596pft9dfxj qf8\\7mq72ddmzjhmf.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0033.215] GetFileType (hFile=0x2c8) returned 0x1 [0033.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0033.215] GetFileType (hFile=0x2c8) returned 0x1 [0033.215] GetFileSize (in: hFile=0x2c8, lpFileSizeHigh=0x33e99c | out: lpFileSizeHigh=0x33e99c*=0x0) returned 0x1283d [0033.215] ReadFile (in: hFile=0x2c8, lpBuffer=0x204e73c, nNumberOfBytesToRead=0x1283d, lpNumberOfBytesRead=0x33e948, lpOverlapped=0x0 | out: lpBuffer=0x204e73c*, lpNumberOfBytesRead=0x33e948*=0x1283d, lpOverlapped=0x0) returned 1 [0033.215] CloseHandle (hObject=0x2c8) returned 1 [0033.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e880) returned 1 [0033.217] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8\\7mq72DdMZjhMf.jpg.Lime" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\rsvw596pft9dfxj qf8\\7mq72ddmzjhmf.jpg.lime"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2c8 [0033.217] GetFileType (hFile=0x2c8) returned 0x1 [0033.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e87c) returned 1 [0033.217] GetFileType (hFile=0x2c8) returned 0x1 [0033.217] WriteFile (in: hFile=0x2c8, lpBuffer=0x2061554*, nNumberOfBytesToWrite=0x12840, lpNumberOfBytesWritten=0x33e938, lpOverlapped=0x0 | out: lpBuffer=0x2061554*, lpNumberOfBytesWritten=0x33e938*=0x12840, lpOverlapped=0x0) returned 1 [0033.218] CloseHandle (hObject=0x2c8) returned 1 [0033.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0033.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\rsvw596pft9dfxj qf8"), fInfoLevelId=0x0, lpFileInformation=0x33e924 | out: lpFileInformation=0x33e924*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd7d94da0, ftCreationTime.dwHighDateTime=0x1d3532e, ftLastAccessTime.dwLowDateTime=0x7120511f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7120511f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0033.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0033.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0033.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\rsvw596pft9dfxj qf8"), fInfoLevelId=0x0, lpFileInformation=0x33e918 | out: lpFileInformation=0x33e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd7d94da0, ftCreationTime.dwHighDateTime=0x1d3532e, ftLastAccessTime.dwLowDateTime=0x7120511f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7120511f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0033.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0033.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0033.220] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc3d8 [0033.221] FindNextFileW (in: hFindFile=0x4dc3d8, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0033.221] FindClose (in: hFindFile=0x4dc3d8 | out: hFindFile=0x4dc3d8) returned 1 [0033.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0033.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0033.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0033.221] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc518 [0033.221] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0033.221] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0033.221] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0033.221] FindNextFileW (in: hFindFile=0x4dc518, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0033.221] FindClose (in: hFindFile=0x4dc518 | out: hFindFile=0x4dc518) returned 1 [0033.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0033.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0033.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8c4) returned 1 [0033.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8c0) returned 1 [0033.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e928) returned 1 [0033.222] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8\\7mq72DdMZjhMf.jpg", lpFindFileData=0x33e650 | out: lpFindFileData=0x33e650) returned 0x4dc898 [0033.222] FindNextFileW (in: hFindFile=0x4dc898, lpFindFileData=0x33e660 | out: lpFindFileData=0x33e660) returned 0 [0033.223] FindClose (in: hFindFile=0x4dc898 | out: hFindFile=0x4dc898) returned 1 [0033.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0033.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f4) returned 1 [0033.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8fc) returned 1 [0033.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8f8) returned 1 [0033.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8a8) returned 1 [0033.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8a4) returned 1 [0033.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e89c) returned 1 [0033.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e898) returned 1 [0033.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e90c) returned 1 [0033.225] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8", lpFindFileData=0x33e634 | out: lpFindFileData=0x33e634) returned 0x4dc618 [0033.226] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e644 | out: lpFindFileData=0x33e644) returned 0 [0033.226] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0033.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8cc) returned 1 [0033.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d8) returned 1 [0033.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e940) returned 1 [0033.226] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\RSvw596pfT9dfXj QF8\\*", lpFindFileData=0x33e668 | out: lpFindFileData=0x33e668) returned 0x4dc798 [0033.226] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0033.226] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 1 [0033.226] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e678 | out: lpFindFileData=0x33e678) returned 0 [0033.226] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0033.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e900) returned 1 [0033.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e90c) returned 1 [0033.226] CoTaskMemAlloc (cb=0x20c) returned 0x4efbb0 [0033.226] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4efbb0 | out: pszPath="C:\\Users\\5JgHKoaOfdp") returned 0x0 [0033.273] CoTaskMemFree (pv=0x4efbb0) [0033.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e498, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\", lpFilePart=0x0) returned 0x15 [0033.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.274] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0033.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp" (normalized: "c:\\users\\5jghkoaofdp"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8baa9d7, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xa9c5c619, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0xa9c5c619, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0033.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp" (normalized: "c:\\users\\5jghkoaofdp"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8baa9d7, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xa9c5c619, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0xa9c5c619, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0033.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.274] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0033.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.274] GetFullPathNameW (in: lpFileName="5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x28 [0033.274] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc798 [0033.274] FindNextFileW (in: hFindFile=0x4dc798, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.274] FindClose (in: hFindFile=0x4dc798 | out: hFindFile=0x4dc798) returned 1 [0033.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\", lpFilePart=0x0) returned 0x15 [0033.275] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc1d8 [0033.275] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.275] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.275] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.275] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.275] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.275] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.275] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.275] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.275] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.276] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.276] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.276] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.276] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.276] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.276] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.276] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.276] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.276] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.276] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.276] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.276] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.276] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.277] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.277] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.277] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.277] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.277] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.277] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.277] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.277] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.277] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.277] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0033.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\", lpFilePart=0x0) returned 0x15 [0033.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.278] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0033.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp" (normalized: "c:\\users\\5jghkoaofdp"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8baa9d7, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xa9c5c619, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0xa9c5c619, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0033.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp" (normalized: "c:\\users\\5jghkoaofdp"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8baa9d7, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xa9c5c619, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0xa9c5c619, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0033.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.278] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0033.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.278] GetFullPathNameW (in: lpFileName="5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x28 [0033.278] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc4d8 [0033.278] FindNextFileW (in: hFindFile=0x4dc4d8, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.278] FindClose (in: hFindFile=0x4dc4d8 | out: hFindFile=0x4dc4d8) returned 1 [0033.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\", lpFilePart=0x0) returned 0x15 [0033.278] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc618 [0033.279] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.279] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.279] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.279] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.279] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.279] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.279] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.279] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.279] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.279] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.279] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.279] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.279] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.280] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.281] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.281] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.281] FindNextFileW (in: hFindFile=0x4dc618, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.281] FindClose (in: hFindFile=0x4dc618 | out: hFindFile=0x4dc618) returned 1 [0033.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0033.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\", lpFilePart=0x0) returned 0x15 [0033.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e43c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.281] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x33e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0033.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8e4) returned 1 [0033.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp" (normalized: "c:\\users\\5jghkoaofdp"), fInfoLevelId=0x0, lpFileInformation=0x33e960 | out: lpFileInformation=0x33e960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8baa9d7, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xa9c5c619, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0xa9c5c619, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0033.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e0) returned 1 [0033.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d8) returned 1 [0033.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp" (normalized: "c:\\users\\5jghkoaofdp"), fInfoLevelId=0x0, lpFileInformation=0x33e954 | out: lpFileInformation=0x33e954*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8baa9d7, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xa9c5c619, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0xa9c5c619, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0033.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8d4) returned 1 [0033.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e948) returned 1 [0033.281] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x33e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0033.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.281] GetFullPathNameW (in: lpFileName="5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e3ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x28 [0033.281] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", lpFindFileData=0x33e670 | out: lpFindFileData=0x33e670) returned 0x4dc698 [0033.282] FindNextFileW (in: hFindFile=0x4dc698, lpFindFileData=0x33e680 | out: lpFindFileData=0x33e680) returned 0 [0033.282] FindClose (in: hFindFile=0x4dc698 | out: hFindFile=0x4dc698) returned 1 [0033.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e908) returned 1 [0033.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e914) returned 1 [0033.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\.", nBufferLength=0x105, lpBuffer=0x33e3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e97c) returned 1 [0033.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x33e464, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0033.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\", nBufferLength=0x105, lpBuffer=0x33e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\", lpFilePart=0x0) returned 0x15 [0033.282] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\*", lpFindFileData=0x33e6a4 | out: lpFindFileData=0x33e6a4) returned 0x4dc1d8 [0033.282] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.282] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.282] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.282] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.282] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.282] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.282] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 1 [0033.283] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6b4 | out: lpFindFileData=0x33e6b4) returned 0 [0033.283] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0033.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e93c) returned 1 [0033.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e948) returned 1 [0033.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\NTUSER.DAT", lpFilePart=0x0) returned 0x1f [0033.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8d4) returned 1 [0033.284] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\NTUSER.DAT" (normalized: "c:\\users\\5jghkoaofdp\\ntuser.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0033.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33d6c4) returned 1 [0033.288] CoTaskMemAlloc (cb=0x20c) returned 0x4efbb0 [0033.288] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x4efbb0 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Desktop") returned 0x0 [0033.288] CoTaskMemFree (pv=0x4efbb0) [0033.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e498, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe.config", nBufferLength=0x105, lpBuffer=0x33e2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe.config", lpFilePart=0x0) returned 0x2d [0033.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e788) returned 1 [0033.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe.config" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\crypt.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x33e804 | out: lpFileInformation=0x33e804*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0033.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e784) returned 1 [0033.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e914) returned 1 [0033.383] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2b8 [0033.384] GetFileType (hFile=0x2b8) returned 0x1 [0033.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e910) returned 1 [0033.384] GetFileType (hFile=0x2b8) returned 0x1 [0033.384] WriteFile (in: hFile=0x2b8, lpBuffer=0x3184e08*, nNumberOfBytesToWrite=0x62400, lpNumberOfBytesWritten=0x33e9cc, lpOverlapped=0x0 | out: lpBuffer=0x3184e08*, lpNumberOfBytesWritten=0x33e9cc*=0x62400, lpOverlapped=0x0) returned 1 [0033.388] CloseHandle (hObject=0x2b8) returned 1 [0033.393] CoTaskMemAlloc (cb=0x20c) returned 0x4f2108 [0033.393] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x4f2108 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Desktop") returned 0x0 [0033.393] CoTaskMemFree (pv=0x4f2108) [0033.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e498, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e46c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8ec) returned 1 [0033.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe"), fInfoLevelId=0x0, lpFileInformation=0x33e968 | out: lpFileInformation=0x33e968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713a8ae4, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x713a8ae4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x713a8ae4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x62400)) returned 1 [0033.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0033.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0033.396] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2b8 [0033.396] GetFileType (hFile=0x2b8) returned 0x1 [0033.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0033.396] GetFileType (hFile=0x2b8) returned 0x1 [0033.400] GetFileSize (in: hFile=0x2b8, lpFileSizeHigh=0x33ea54 | out: lpFileSizeHigh=0x33ea54*=0x0) returned 0x62400 [0033.402] ReadFile (in: hFile=0x2b8, lpBuffer=0x32aba48, nNumberOfBytesToRead=0x62400, lpNumberOfBytesRead=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x32aba48*, lpNumberOfBytesRead=0x33e974*=0x62400, lpOverlapped=0x0) returned 1 [0033.407] CloseHandle (hObject=0x2b8) returned 1 [0033.408] CoTaskMemAlloc (cb=0x20c) returned 0x4ee298 [0033.408] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x4ee298 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Desktop") returned 0x0 [0033.409] CoTaskMemFree (pv=0x4ee298) [0033.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e498, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e4f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e4bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e938) returned 1 [0033.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe"), fInfoLevelId=0x0, lpFileInformation=0x33e9b4 | out: lpFileInformation=0x33e9b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713a8ae4, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x713a8ae4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x713a8ae4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x62400)) returned 1 [0033.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e934) returned 1 [0033.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e99c) returned 1 [0033.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.409] GetFullPathNameW (in: lpFileName="#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.409] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFindFileData=0x33e6c4 | out: lpFindFileData=0x33e6c4) returned 0x4dc1d8 [0033.409] FindNextFileW (in: hFindFile=0x4dc1d8, lpFindFileData=0x33e6d4 | out: lpFindFileData=0x33e6d4) returned 0 [0033.409] FindClose (in: hFindFile=0x4dc1d8 | out: hFindFile=0x4dc1d8) returned 1 [0033.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e95c) returned 1 [0033.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e968) returned 1 [0033.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e970) returned 1 [0033.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe"), fInfoLevelId=0x0, lpFileInformation=0x33e9ec | out: lpFileInformation=0x33e9ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713a8ae4, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x713a8ae4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x713a8ae4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x62400)) returned 1 [0033.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e96c) returned 1 [0033.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e4fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.410] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe")) returned 1 [0033.412] CoTaskMemAlloc (cb=0x20c) returned 0x4ed7d0 [0033.412] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x4ed7d0 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Desktop") returned 0x0 [0033.412] CoTaskMemFree (pv=0x4ed7d0) [0033.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e498, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e46c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e8ec) returned 1 [0033.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe"), fInfoLevelId=0x0, lpFileInformation=0x33e968 | out: lpFileInformation=0x33e968*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0033.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e8e8) returned 1 [0033.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x33e384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0033.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33e898) returned 1 [0033.413] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2b8 [0033.413] GetFileType (hFile=0x2b8) returned 0x1 [0033.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33e894) returned 1 [0033.413] GetFileType (hFile=0x2b8) returned 0x1 [0033.414] GetTimeZoneInformation (in: lpTimeZoneInformation=0x33e884 | out: lpTimeZoneInformation=0x33e884) returned 0x0 [0033.438] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.438] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.438] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.439] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.439] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.439] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.439] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.439] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.440] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.440] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.440] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.440] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.440] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.440] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.441] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.441] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.441] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.441] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.441] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.442] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.442] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.442] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.442] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.442] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.442] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.443] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.443] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.443] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.443] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.443] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.444] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.444] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.444] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.444] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.444] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.445] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.445] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.445] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.445] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.445] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.445] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.446] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.446] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.446] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.446] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.446] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.447] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.447] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.447] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.447] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.447] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.447] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.448] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.448] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.448] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.448] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.448] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.448] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.449] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.449] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.449] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.449] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.449] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.449] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.450] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.450] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.450] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.450] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.450] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.451] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.451] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.451] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.451] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.451] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.451] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.451] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.451] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.451] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.452] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.452] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.452] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.452] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.452] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.452] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.452] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.452] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.452] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.453] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.453] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.453] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.453] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.453] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.453] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.453] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.453] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.453] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.453] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.454] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x33e974, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e974*=0x1000, lpOverlapped=0x0) returned 1 [0033.454] WriteFile (in: hFile=0x2b8, lpBuffer=0x20373a4*, nNumberOfBytesToWrite=0x405, lpNumberOfBytesWritten=0x33e96c, lpOverlapped=0x0 | out: lpBuffer=0x20373a4*, lpNumberOfBytesWritten=0x33e96c*=0x405, lpOverlapped=0x0) returned 1 [0033.454] CloseHandle (hObject=0x2b8) returned 1 [0033.497] GdipLoadImageFromStream (stream=0x4540030, image=0x33e508) returned 0x0 [0033.581] GdipImageForceValidation (image=0x49086d8) returned 0x0 [0033.598] GdipGetImageType (image=0x49086d8, type=0x33e504) returned 0x0 [0033.598] GdipGetImageRawFormat (image=0x49086d8, format=0x33e478*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0033.599] CoTaskMemAlloc (cb=0x20c) returned 0x4ed7d0 [0033.599] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x4ed7d0 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Desktop") returned 0x0 [0033.599] CoTaskMemFree (pv=0x4ed7d0) [0033.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e50c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.600] GdipGetImageRawFormat (image=0x49086d8, format=0x33eabc*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0033.601] GdipGetImageEncodersSize (numEncoders=0x33ea70, size=0x33ea6c) returned 0x0 [0033.602] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x4f1900 | out: encoders=0x4f1900) returned 0x0 [0033.605] LocalFree (hMem=0x4f1900) returned 0x0 [0033.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#BackGround.png", nBufferLength=0x105, lpBuffer=0x33e4dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#BackGround.png", lpFilePart=0x0) returned 0x2c [0033.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#BackGround.png", nBufferLength=0x105, lpBuffer=0x33e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#BackGround.png", lpFilePart=0x0) returned 0x2c [0033.607] GdipSaveImageToFile (image=0x49086d8, filename="C:\\Users\\5JgHKoaOfdp\\Desktop/#BackGround.png", clsidEncoder=0x33ea84*(Data1=0x557cf406, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) returned 0x0 [0033.628] CoTaskMemAlloc (cb=0x20c) returned 0x4ef1b0 [0033.628] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x4ef1b0 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Desktop") returned 0x0 [0033.628] CoTaskMemFree (pv=0x4ef1b0) [0033.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x33e50c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0033.638] CoTaskMemAlloc (cb=0x31) returned 0x4dc2d8 [0033.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5JgHKoaOfdp\\Desktop/#BackGround.png", cchWideChar=44, lpMultiByteStr=0x205a228, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5JgHKoaOfdp\\Desktop/#BackGround.png", lpUsedDefaultChar=0x0) returned 44 [0033.638] SystemParametersInfoA (in: uiAction=0x14, uiParam=0x0, pvParam=0x4dc2dc, fWinIni=0x1 | out: pvParam=0x4dc2dc) returned 1 [0033.673] CoTaskMemFree (pv=0x4dc2d8) [0033.695] SetForegroundWindow (hWnd=0x8002c) returned 0 [0033.695] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0033.695] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x46, wParam=0x0, lParam=0x33ea2c) returned 0x0 [0033.695] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x6001a, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0033.695] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0033.696] NtdllDefWindowProc_W (hWnd=0x20216, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0033.696] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0033.696] OleInitialize (pvReserved=0x0) returned 0x0 [0033.696] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x33e7d4 | out: lplpMessageFilter=0x33e7d4*=0x0) returned 0x0 [0033.697] SetFocus (hWnd=0x8002c) returned 0x0 [0033.699] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0033.701] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0033.701] GetParent (hWnd=0x8002c) returned 0x0 [0033.701] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0033.702] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0033.702] InvalidateRect (hWnd=0x50180, lpRect=0x0, bErase=1) returned 1 [0033.702] GetWindowThreadProcessId (in: hWnd=0x8002c, lpdwProcessId=0x33eacc | out: lpdwProcessId=0x33eacc) returned 0xafc [0033.702] GetCurrentThreadId () returned 0xafc [0033.703] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc14b [0033.703] PostMessageW (hWnd=0x8002c, Msg=0xc14b, wParam=0x0, lParam=0x0) returned 1 [0033.703] GetWindowTextLengthW (hWnd=0x8002c) returned 0 [0033.703] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0033.703] GetSystemMetrics (nIndex=42) returned 0 [0033.703] GetWindowTextW (in: hWnd=0x8002c, lpString=0x33ea54, nMaxCount=1 | out: lpString="") returned 0 [0033.703] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xd, wParam=0x1, lParam=0x33ea54) returned 0x0 [0033.703] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x46, wParam=0x0, lParam=0x33ee80) returned 0x0 [0033.703] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x6001a, Msg=0x46, wParam=0x0, lParam=0x33ee80) returned 0x0 [0033.704] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0033.704] GetWindowPlacement (in: hWnd=0x8002c, lpwndpl=0x33ec30 | out: lpwndpl=0x33ec30) returned 1 [0033.704] GetClientRect (in: hWnd=0x8002c, lpRect=0x33ebdc | out: lpRect=0x33ebdc) returned 1 [0033.704] GetWindowTextLengthW (hWnd=0x8002c) returned 0 [0033.704] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0033.704] GetSystemMetrics (nIndex=42) returned 0 [0033.704] GetWindowTextW (in: hWnd=0x8002c, lpString=0x33eab0, nMaxCount=1 | out: lpString="") returned 0 [0033.704] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xd, wParam=0x1, lParam=0x33eab0) returned 0x0 [0033.704] GetClientRect (in: hWnd=0x8002c, lpRect=0x33eae4 | out: lpRect=0x33eae4) returned 1 [0033.705] GetSystemMetrics (nIndex=80) returned 1 [0033.707] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1f709d6, dwData=0x0) returned 1 [0033.708] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x33e758 | out: lpmi=0x33e758) returned 1 [0033.709] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x2d0105a8 [0033.709] GetDeviceCaps (hdc=0x2d0105a8, index=12) returned 32 [0033.709] GetDeviceCaps (hdc=0x2d0105a8, index=14) returned 1 [0033.709] DeleteDC (hdc=0x2d0105a8) returned 1 [0033.709] GetCurrentObject (hdc=0x80107d6, type=0x1) returned 0x1b00017 [0033.710] GetCurrentObject (hdc=0x80107d6, type=0x2) returned 0x1900010 [0033.710] GetCurrentObject (hdc=0x80107d6, type=0x7) returned 0x330505aa [0033.710] GetCurrentObject (hdc=0x80107d6, type=0x6) returned 0x18a0048 [0033.710] SaveDC (hdc=0x80107d6) returned 1 [0033.710] GetNearestColor (hdc=0x80107d6, color=0xf0f0f0) returned 0xf0f0f0 [0033.711] CreateSolidBrush (color=0xf0f0f0) returned 0x181000c9 [0033.711] FillRect (hDC=0x80107d6, lprc=0x33e984, hbr=0x181000c9) returned 1 [0033.712] DeleteObject (ho=0x181000c9) returned 1 [0033.712] RestoreDC (hdc=0x80107d6, nSavedDC=-1) returned 1 [0033.712] GetWindowPlacement (in: hWnd=0x8002c, lpwndpl=0x33ec14 | out: lpwndpl=0x33ec14) returned 1 [0033.712] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x47, wParam=0x0, lParam=0x33ee80) returned 0x0 [0033.712] GetClientRect (in: hWnd=0x8002c, lpRect=0x33ebc4 | out: lpRect=0x33ebc4) returned 1 [0033.712] GetWindowRect (in: hWnd=0x8002c, lpRect=0x33ebc4 | out: lpRect=0x33ebc4) returned 1 [0033.712] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x5, wParam=0x0, lParam=0x210086) returned 0x0 [0033.712] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x3, wParam=0x0, lParam=0x1d001d) returned 0x0 [0033.712] GetClientRect (in: hWnd=0x8002c, lpRect=0x33ebf4 | out: lpRect=0x33ebf4) returned 1 [0033.712] GetWindowRect (in: hWnd=0x8002c, lpRect=0x33ebf4 | out: lpRect=0x33ebf4) returned 1 [0033.713] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.713] IsWindowUnicode (hWnd=0x8002c) returned 1 [0033.713] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.714] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0033.714] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0033.714] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x46, wParam=0x0, lParam=0x33ed20) returned 0x0 [0033.714] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x83, wParam=0x1, lParam=0x33ecf8) returned 0x0 [0033.714] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0033.714] GetWindowPlacement (in: hWnd=0x8002c, lpwndpl=0x33ead0 | out: lpwndpl=0x33ead0) returned 1 [0033.714] GetClientRect (in: hWnd=0x8002c, lpRect=0x33ea7c | out: lpRect=0x33ea7c) returned 1 [0033.714] GetWindowTextLengthW (hWnd=0x8002c) returned 0 [0033.714] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0033.714] GetSystemMetrics (nIndex=42) returned 0 [0033.714] GetWindowTextW (in: hWnd=0x8002c, lpString=0x33e950, nMaxCount=1 | out: lpString="") returned 0 [0033.714] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xd, wParam=0x1, lParam=0x33e950) returned 0x0 [0033.714] GetClientRect (in: hWnd=0x8002c, lpRect=0x33e984 | out: lpRect=0x33e984) returned 1 [0033.714] GetCurrentObject (hdc=0x80106d3, type=0x1) returned 0x1b00017 [0033.714] GetCurrentObject (hdc=0x80106d3, type=0x2) returned 0x1900010 [0033.714] GetCurrentObject (hdc=0x80106d3, type=0x7) returned 0x330505aa [0033.714] GetCurrentObject (hdc=0x80106d3, type=0x6) returned 0x18a0048 [0033.714] SaveDC (hdc=0x80106d3) returned 1 [0033.714] GetNearestColor (hdc=0x80106d3, color=0xf0f0f0) returned 0xf0f0f0 [0033.714] CreateSolidBrush (color=0xf0f0f0) returned 0x191000c9 [0033.714] FillRect (hDC=0x80106d3, lprc=0x33e824, hbr=0x191000c9) returned 1 [0033.715] DeleteObject (ho=0x191000c9) returned 1 [0033.715] RestoreDC (hdc=0x80106d3, nSavedDC=-1) returned 1 [0033.715] GetWindowPlacement (in: hWnd=0x8002c, lpwndpl=0x33eab4 | out: lpwndpl=0x33eab4) returned 1 [0033.715] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x47, wParam=0x0, lParam=0x33ed20) returned 0x0 [0033.715] GetClientRect (in: hWnd=0x8002c, lpRect=0x33ea64 | out: lpRect=0x33ea64) returned 1 [0033.715] GetWindowRect (in: hWnd=0x8002c, lpRect=0x33ea64 | out: lpRect=0x33ea64) returned 1 [0033.715] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0033.715] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.715] IsWindowUnicode (hWnd=0x6001a) returned 1 [0033.715] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.715] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0033.715] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0033.715] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x6001a, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0033.715] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.715] IsWindowUnicode (hWnd=0x8002c) returned 1 [0033.715] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.715] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0033.715] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0033.715] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x46, wParam=0x0, lParam=0x33ed20) returned 0x0 [0033.715] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x83, wParam=0x1, lParam=0x33ecf8) returned 0x0 [0033.715] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0033.715] GetWindowPlacement (in: hWnd=0x8002c, lpwndpl=0x33ead0 | out: lpwndpl=0x33ead0) returned 1 [0033.715] GetClientRect (in: hWnd=0x8002c, lpRect=0x33ea7c | out: lpRect=0x33ea7c) returned 1 [0033.715] GetWindowTextLengthW (hWnd=0x8002c) returned 0 [0033.715] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0033.715] GetSystemMetrics (nIndex=42) returned 0 [0033.716] GetWindowTextW (in: hWnd=0x8002c, lpString=0x33e950, nMaxCount=1 | out: lpString="") returned 0 [0033.716] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xd, wParam=0x1, lParam=0x33e950) returned 0x0 [0033.716] GetClientRect (in: hWnd=0x8002c, lpRect=0x33e984 | out: lpRect=0x33e984) returned 1 [0033.716] GetCurrentObject (hdc=0x80107d6, type=0x1) returned 0x1b00017 [0033.716] GetCurrentObject (hdc=0x80107d6, type=0x2) returned 0x1900010 [0033.716] GetCurrentObject (hdc=0x80107d6, type=0x7) returned 0x330505aa [0033.716] GetCurrentObject (hdc=0x80107d6, type=0x6) returned 0x18a0048 [0033.716] SaveDC (hdc=0x80107d6) returned 1 [0033.716] GetNearestColor (hdc=0x80107d6, color=0xf0f0f0) returned 0xf0f0f0 [0033.716] CreateSolidBrush (color=0xf0f0f0) returned 0x1a1000c9 [0033.716] FillRect (hDC=0x80107d6, lprc=0x33e824, hbr=0x1a1000c9) returned 1 [0033.716] DeleteObject (ho=0x1a1000c9) returned 1 [0033.716] RestoreDC (hdc=0x80107d6, nSavedDC=-1) returned 1 [0033.716] GetWindowPlacement (in: hWnd=0x8002c, lpwndpl=0x33eab4 | out: lpwndpl=0x33eab4) returned 1 [0033.716] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x47, wParam=0x0, lParam=0x33ed20) returned 0x0 [0033.716] GetClientRect (in: hWnd=0x8002c, lpRect=0x33ea64 | out: lpRect=0x33ea64) returned 1 [0033.716] GetWindowRect (in: hWnd=0x8002c, lpRect=0x33ea64 | out: lpRect=0x33ea64) returned 1 [0033.716] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x31f, wParam=0x0, lParam=0x0) returned 0x0 [0033.716] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.716] IsWindowUnicode (hWnd=0x6001a) returned 1 [0033.716] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.716] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0033.716] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0033.716] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x6001a, Msg=0x320, wParam=0x94309e30, lParam=0x1) returned 0x0 [0033.716] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.716] IsWindowUnicode (hWnd=0x8002c) returned 1 [0033.716] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.716] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0033.716] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0033.716] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x320, wParam=0x94309e30, lParam=0x1) returned 0x0 [0033.716] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.716] IsWindowUnicode (hWnd=0x20216) returned 1 [0033.716] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.716] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0033.716] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0033.717] NtdllDefWindowProc_W (hWnd=0x20216, Msg=0x320, wParam=0x94309e30, lParam=0x1) returned 0x0 [0033.717] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.717] IsWindowUnicode (hWnd=0x70018) returned 1 [0033.717] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.717] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0033.717] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0033.717] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.717] IsWindowUnicode (hWnd=0x8002c) returned 1 [0033.717] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.717] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0033.717] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0033.718] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.718] IsWindowUnicode (hWnd=0x8002c) returned 1 [0033.718] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0033.718] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0033.718] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0033.718] BeginPaint (in: hWnd=0x8002c, lpPaint=0x33ea78 | out: lpPaint=0x33ea78) returned 0x80107d6 [0033.719] GdipCreateHalftonePalette () returned 0x3a0805a8 [0033.719] SelectPalette (hdc=0x80107d6, hPal=0x3a0805a8, bForceBkgd=1) returned 0x188000b [0033.719] GetWindowTextLengthW (hWnd=0x8002c) returned 0 [0033.719] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0033.719] GetSystemMetrics (nIndex=42) returned 0 [0033.719] GetWindowTextW (in: hWnd=0x8002c, lpString=0x33ea1c, nMaxCount=1 | out: lpString="") returned 0 [0033.719] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xd, wParam=0x1, lParam=0x33ea1c) returned 0x0 [0033.719] SelectPalette (hdc=0x80107d6, hPal=0x188000b, bForceBkgd=0) returned 0x3a0805a8 [0033.719] EndPaint (hWnd=0x8002c, lpPaint=0x33ea74) returned 1 [0033.719] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0033.719] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0034.007] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0034.007] IsWindowUnicode (hWnd=0x900d4) returned 1 [0034.007] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0034.007] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0034.007] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0034.007] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0034.007] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0034.007] WaitMessage () returned 1 [0034.226] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0034.226] IsWindowUnicode (hWnd=0x8002c) returned 1 [0034.226] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0034.226] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0034.226] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0034.226] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0034.226] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0034.227] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0034.227] WaitMessage () returned 1 [0034.758] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0034.758] IsWindowUnicode (hWnd=0x8002c) returned 1 [0034.758] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0034.758] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0034.758] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0034.758] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0034.758] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0034.758] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0034.758] WaitMessage () returned 1 [0035.288] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0035.288] IsWindowUnicode (hWnd=0x8002c) returned 1 [0035.288] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0035.288] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0035.288] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0035.288] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0035.288] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0035.288] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0035.288] WaitMessage () returned 1 [0035.819] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0035.819] IsWindowUnicode (hWnd=0x8002c) returned 1 [0035.819] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0035.819] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0035.819] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0035.819] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0035.820] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0035.820] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0035.820] WaitMessage () returned 1 [0036.363] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0036.363] IsWindowUnicode (hWnd=0x8002c) returned 1 [0036.363] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0036.363] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0036.363] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0036.363] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0036.363] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0036.363] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0036.364] WaitMessage () returned 1 [0036.896] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0036.896] IsWindowUnicode (hWnd=0x8002c) returned 1 [0036.896] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0036.896] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0036.896] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0036.896] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0036.896] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0036.896] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0036.896] WaitMessage () returned 1 [0037.426] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0037.426] IsWindowUnicode (hWnd=0x8002c) returned 1 [0037.426] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0037.426] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0037.426] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0037.426] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0037.426] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0037.426] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0037.426] WaitMessage () returned 1 [0038.166] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0038.166] IsWindowUnicode (hWnd=0x8002c) returned 1 [0038.166] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0038.166] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0038.166] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0038.171] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0038.171] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0038.171] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0038.171] WaitMessage () returned 1 [0041.322] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0041.322] IsWindowUnicode (hWnd=0x8002c) returned 1 [0041.322] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0041.322] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0041.322] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0041.322] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0041.323] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0041.323] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0041.323] WaitMessage () returned 1 [0041.849] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0041.849] IsWindowUnicode (hWnd=0x8002c) returned 1 [0041.849] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0041.849] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0041.849] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0041.850] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0041.850] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0041.850] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0041.850] WaitMessage () returned 1 [0042.381] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0042.381] IsWindowUnicode (hWnd=0x8002c) returned 1 [0042.381] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0042.381] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0042.381] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0042.381] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0042.381] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0042.381] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0042.381] WaitMessage () returned 1 [0042.912] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0042.912] IsWindowUnicode (hWnd=0x8002c) returned 1 [0042.912] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0042.912] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0042.912] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0042.912] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0042.912] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0042.912] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0042.912] WaitMessage () returned 1 [0043.443] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0043.443] IsWindowUnicode (hWnd=0x8002c) returned 1 [0043.443] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0043.443] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0043.443] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0043.443] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0043.444] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0043.444] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0043.444] WaitMessage () returned 1 [0044.500] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0044.501] IsWindowUnicode (hWnd=0x8002c) returned 1 [0044.501] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0044.501] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0044.501] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0044.501] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0044.501] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0044.501] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0044.501] WaitMessage () returned 1 [0055.833] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0055.833] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0055.833] WaitMessage () returned 1 [0055.833] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0055.833] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x1a, wParam=0x0, lParam=0x23de58) returned 0x0 [0055.834] SystemParametersInfoW (in: uiAction=0x26, uiParam=0x0, pvParam=0x33ec08, fWinIni=0x0 | out: pvParam=0x33ec08) returned 1 [0055.835] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0055.835] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x6001a, Msg=0x1a, wParam=0x0, lParam=0x23de58) returned 0x0 [0055.835] WaitMessage () returned 1 [0055.836] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0055.836] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x4e8cf0 [0055.837] PostMessageW (hWnd=0x20216, Msg=0x201a, wParam=0x0, lParam=0x4e8cf0) returned 1 [0055.837] NtdllDefWindowProc_W (hWnd=0x20216, Msg=0x1a, wParam=0x0, lParam=0x23de58) returned 0x0 [0055.837] IsWindowUnicode (hWnd=0x20216) returned 1 [0055.837] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0055.837] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0055.837] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0055.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0055.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0055.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", nBufferLength=0x105, lpBuffer=0x33e674, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpFilePart=0x0) returned 0x26 [0055.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x33eaf4) returned 1 [0055.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\crypt.exe"), fInfoLevelId=0x0, lpFileInformation=0x33eb70 | out: lpFileInformation=0x33eb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3418af90, ftCreationTime.dwHighDateTime=0x1d359fa, ftLastAccessTime.dwLowDateTime=0x3418af90, ftLastAccessTime.dwHighDateTime=0x1d359fa, ftLastWriteTime.dwLowDateTime=0x3ff21000, ftLastWriteTime.dwHighDateTime=0x1d38ef0, nFileSizeHigh=0x0, nFileSizeLow=0x6e000)) returned 1 [0055.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x33eaf0) returned 1 [0055.894] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", lpdwHandle=0x33ebf0 | out: lpdwHandle=0x33ebf0) returned 0x66c [0055.895] GetFileVersionInfoW (in: lptstrFilename="C:\\Users\\5JgHKoaOfdp\\Desktop\\Crypt.exe", dwHandle=0x0, dwLen=0x66c, lpData=0x204038c | out: lpData=0x204038c) returned 1 [0055.895] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x33ebc4, puLen=0x33ebc0 | out: lplpBuffer=0x33ebc4*=0x2040428, puLen=0x33ebc0) returned 1 [0055.896] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x33eb44, puLen=0x33eb40 | out: lplpBuffer=0x33eb44*=0x20404a0, puLen=0x33eb40) returned 1 [0055.897] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x33eb44, puLen=0x33eb40 | out: lplpBuffer=0x33eb44*=0x20404d0, puLen=0x33eb40) returned 1 [0055.897] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x33eb44, puLen=0x33eb40 | out: lplpBuffer=0x33eb44*=0x2040518, puLen=0x33eb40) returned 1 [0055.897] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x33eb44, puLen=0x33eb40 | out: lplpBuffer=0x33eb44*=0x2040548, puLen=0x33eb40) returned 1 [0055.897] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x33eb44, puLen=0x33eb40 | out: lplpBuffer=0x33eb44*=0x2040580, puLen=0x33eb40) returned 1 [0055.897] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x33eb44, puLen=0x33eb40 | out: lplpBuffer=0x33eb44*=0x20405f8, puLen=0x33eb40) returned 1 [0055.897] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x33eb44, puLen=0x33eb40 | out: lplpBuffer=0x33eb44*=0x204062c, puLen=0x33eb40) returned 1 [0055.897] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x33eb44, puLen=0x33eb40 | out: lplpBuffer=0x33eb44*=0x2040678, puLen=0x33eb40) returned 1 [0055.897] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x33eb44, puLen=0x33eb40 | out: lplpBuffer=0x33eb44*=0x204047e, puLen=0x33eb40) returned 1 [0055.897] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x33eb44, puLen=0x33eb40 | out: lplpBuffer=0x33eb44*=0x20405c8, puLen=0x33eb40) returned 1 [0055.897] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x33eb44, puLen=0x33eb40 | out: lplpBuffer=0x33eb44*=0x0, puLen=0x33eb40) returned 0 [0055.898] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x33eb44, puLen=0x33eb40 | out: lplpBuffer=0x33eb44*=0x0, puLen=0x33eb40) returned 0 [0055.898] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x33eb38, puLen=0x33eb34 | out: lplpBuffer=0x33eb38*=0x2040428, puLen=0x33eb34) returned 1 [0055.898] VerLanguageNameW (in: wLang=0x0, szLang=0x33e8c8, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0055.903] VerQueryValueW (in: pBlock=0x204038c, lpSubBlock="\\", lplpBuffer=0x33eb48, puLen=0x33eb44 | out: lplpBuffer=0x33eb48*=0x20403b4, puLen=0x33eb44) returned 1 [0055.905] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\ConsoleApplication1\\ConsoleApplication1\\1.0.0.0", ulOptions=0x0, samDesired=0x20019, phkResult=0x33ebe0 | out: phkResult=0x33ebe0*=0x0) returned 0x2 [0055.906] GetWindowThreadProcessId (in: hWnd=0x601ec, lpdwProcessId=0x33ebf8 | out: lpdwProcessId=0x33ebf8) returned 0xafc [0055.907] GetCurrentThreadId () returned 0xafc [0055.913] GetWindowThreadProcessId (in: hWnd=0x601ec, lpdwProcessId=0x33ebf8 | out: lpdwProcessId=0x33ebf8) returned 0xafc [0055.913] GetCurrentThreadId () returned 0xafc [0055.913] GetWindowThreadProcessId (in: hWnd=0x601ec, lpdwProcessId=0x33ebf8 | out: lpdwProcessId=0x33ebf8) returned 0xafc [0055.913] GetCurrentThreadId () returned 0xafc [0055.914] LocalFree (hMem=0x4e8cf0) returned 0x0 [0055.914] NtdllDefWindowProc_W (hWnd=0x20216, Msg=0x201a, wParam=0x0, lParam=0x4e8cf0) returned 0x0 [0055.914] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0055.914] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0055.914] WaitMessage () returned 1 [0055.948] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0055.948] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0055.948] WaitMessage () returned 1 [0055.948] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0055.948] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0055.948] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0055.949] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x6001a, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0055.949] WaitMessage () returned 1 [0055.949] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0055.949] NtdllDefWindowProc_W (hWnd=0x20216, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0055.949] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0055.949] WaitMessage () returned 1 [0056.078] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0056.079] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0056.079] WaitMessage () returned 1 [0056.079] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0056.079] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x1a, wParam=0x0, lParam=0x23de58) returned 0x0 [0056.079] SystemParametersInfoW (in: uiAction=0x26, uiParam=0x0, pvParam=0x33ec08, fWinIni=0x0 | out: pvParam=0x33ec08) returned 1 [0056.079] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0056.079] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x6001a, Msg=0x1a, wParam=0x0, lParam=0x23de58) returned 0x0 [0056.079] WaitMessage () returned 1 [0056.079] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0056.079] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x4e8db0 [0056.080] PostMessageW (hWnd=0x20216, Msg=0x201a, wParam=0x0, lParam=0x4e8db0) returned 1 [0056.080] NtdllDefWindowProc_W (hWnd=0x20216, Msg=0x1a, wParam=0x0, lParam=0x23de58) returned 0x0 [0056.080] IsWindowUnicode (hWnd=0x20216) returned 1 [0056.080] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0056.080] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0056.080] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0056.080] GetWindowThreadProcessId (in: hWnd=0x601ec, lpdwProcessId=0x33ebf8 | out: lpdwProcessId=0x33ebf8) returned 0xafc [0056.080] GetCurrentThreadId () returned 0xafc [0056.080] GetWindowThreadProcessId (in: hWnd=0x601ec, lpdwProcessId=0x33ebf8 | out: lpdwProcessId=0x33ebf8) returned 0xafc [0056.080] GetCurrentThreadId () returned 0xafc [0056.080] GetWindowThreadProcessId (in: hWnd=0x601ec, lpdwProcessId=0x33ebf8 | out: lpdwProcessId=0x33ebf8) returned 0xafc [0056.080] GetCurrentThreadId () returned 0xafc [0056.080] LocalFree (hMem=0x4e8db0) returned 0x0 [0056.080] NtdllDefWindowProc_W (hWnd=0x20216, Msg=0x201a, wParam=0x0, lParam=0x4e8db0) returned 0x0 [0056.080] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0056.080] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0056.080] WaitMessage () returned 1 [0056.082] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0056.082] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0056.083] WaitMessage () returned 1 [0056.083] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0056.083] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0056.083] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0056.083] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x6001a, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0056.083] WaitMessage () returned 1 [0056.083] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0056.083] NtdllDefWindowProc_W (hWnd=0x20216, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0056.083] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0056.083] WaitMessage () returned 1 [0114.339] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 1 [0114.339] IsWindowUnicode (hWnd=0x8002c) returned 1 [0114.339] GetMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x33ef6c) returned 1 [0114.339] TranslateMessage (lpMsg=0x33ef6c) returned 0 [0114.339] DispatchMessageW (lpMsg=0x33ef6c) returned 0x0 [0114.339] BeginPaint (in: hWnd=0x8002c, lpPaint=0x33ea78 | out: lpPaint=0x33ea78) returned 0x470108fd [0114.339] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.339] GetWindowPlacement (in: hWnd=0x8002c, lpwndpl=0x33e7c4 | out: lpwndpl=0x33e7c4) returned 1 [0114.339] GetClientRect (in: hWnd=0x8002c, lpRect=0x33e770 | out: lpRect=0x33e770) returned 1 [0114.339] GetWindowTextLengthW (hWnd=0x8002c) returned 0 [0114.339] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0114.339] GetSystemMetrics (nIndex=42) returned 0 [0114.339] GetWindowTextW (in: hWnd=0x8002c, lpString=0x33e644, nMaxCount=1 | out: lpString="") returned 0 [0114.339] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xd, wParam=0x1, lParam=0x33e644) returned 0x0 [0114.339] GetClientRect (in: hWnd=0x8002c, lpRect=0x33e678 | out: lpRect=0x33e678) returned 1 [0114.339] GetCurrentObject (hdc=0x470108fd, type=0x1) returned 0x1b00017 [0114.339] GetCurrentObject (hdc=0x470108fd, type=0x2) returned 0x1900010 [0114.340] GetCurrentObject (hdc=0x470108fd, type=0x7) returned 0x330505aa [0114.340] GetCurrentObject (hdc=0x470108fd, type=0x6) returned 0x18a0048 [0114.340] SaveDC (hdc=0x470108fd) returned 1 [0114.340] GetNearestColor (hdc=0x470108fd, color=0xf0f0f0) returned 0xf0f0f0 [0114.340] CreateSolidBrush (color=0xf0f0f0) returned 0x1b1000c9 [0114.340] FillRect (hDC=0x470108fd, lprc=0x33e518, hbr=0x1b1000c9) returned 1 [0114.340] DeleteObject (ho=0x1b1000c9) returned 1 [0114.340] RestoreDC (hdc=0x470108fd, nSavedDC=-1) returned 1 [0114.340] SelectPalette (hdc=0x470108fd, hPal=0x3a0805a8, bForceBkgd=1) returned 0x188000b [0114.340] GetWindowTextLengthW (hWnd=0x8002c) returned 0 [0114.340] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0114.340] GetSystemMetrics (nIndex=42) returned 0 [0114.340] GetWindowTextW (in: hWnd=0x8002c, lpString=0x33ea1c, nMaxCount=1 | out: lpString="") returned 0 [0114.340] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x8002c, Msg=0xd, wParam=0x1, lParam=0x33ea1c) returned 0x0 [0114.340] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x3a0805a8 [0114.340] EndPaint (hWnd=0x8002c, lpPaint=0x33ea74) returned 1 [0114.340] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0114.340] PeekMessageW (in: lpMsg=0x33ef6c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x33ef6c) returned 0 [0114.340] WaitMessage () Thread: id = 2 os_tid = 0xb00 Thread: id = 3 os_tid = 0xb04 [0026.791] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0026.791] RoInitialize () returned 0x1 [0026.791] RoUninitialize () returned 0x1 Thread: id = 4 os_tid = 0xb08 Thread: id = 5 os_tid = 0xb64 Thread: id = 6 os_tid = 0x0 Thread: id = 7 os_tid = 0x7b0 Thread: id = 8 os_tid = 0x808 Process: id = "2" image_name = "#decryptor.exe" filename = "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe" page_root = "0x6f488000" os_pid = "0x9ec" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "modified_file" parent_id = "1" os_parent_pid = "0xaf8" cmd_line = "\"C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe\" " cur_dir = "C:\\Users\\5JgHKoaOfdp\\Desktop\\" os_username = "FIVAUF\\5JgHKoaOfdp" os_groups = "FIVAUF\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000befc" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 287 start_va = 0xfb0000 end_va = 0x1017fff entry_point = 0xfb0000 region_type = mapped_file name = "#decryptor.exe" filename = "\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe") Region: id = 288 start_va = 0x1020000 end_va = 0x103ffff entry_point = 0x0 region_type = private name = "private_0x0000000001020000" filename = "" Region: id = 289 start_va = 0x1040000 end_va = 0x1040fff entry_point = 0x0 region_type = private name = "private_0x0000000001040000" filename = "" Region: id = 290 start_va = 0x1050000 end_va = 0x105efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001050000" filename = "" Region: id = 291 start_va = 0x1060000 end_va = 0x109ffff entry_point = 0x0 region_type = private name = "private_0x0000000001060000" filename = "" Region: id = 292 start_va = 0x10a0000 end_va = 0x119ffff entry_point = 0x0 region_type = private name = "private_0x00000000010a0000" filename = "" Region: id = 293 start_va = 0x77550000 end_va = 0x776b7fff entry_point = 0x77550000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 294 start_va = 0x7f5e0000 end_va = 0x7f602fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007f5e0000" filename = "" Region: id = 295 start_va = 0x7f605000 end_va = 0x7f605fff entry_point = 0x0 region_type = private name = "private_0x000000007f605000" filename = "" Region: id = 296 start_va = 0x7f606000 end_va = 0x7f606fff entry_point = 0x0 region_type = private name = "private_0x000000007f606000" filename = "" Region: id = 297 start_va = 0x7f60d000 end_va = 0x7f60ffff entry_point = 0x0 region_type = private name = "private_0x000000007f60d000" filename = "" Region: id = 298 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 299 start_va = 0x7fff0000 end_va = 0x7ff9d524ffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 300 start_va = 0x7ff9d5250000 end_va = 0x7ff9d53f9fff entry_point = 0x7ff9d5250000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 301 start_va = 0x7ff9d53fa000 end_va = 0x7ffffffeffff entry_point = 0x0 region_type = private name = "private_0x00007ff9d53fa000" filename = "" Region: id = 302 start_va = 0x11a0000 end_va = 0x11a3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000011a0000" filename = "" Region: id = 303 start_va = 0x11b0000 end_va = 0x11b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000011b0000" filename = "" Region: id = 304 start_va = 0x11c0000 end_va = 0x11c1fff entry_point = 0x0 region_type = private name = "private_0x00000000011c0000" filename = "" Region: id = 305 start_va = 0x13c0000 end_va = 0x13cffff entry_point = 0x0 region_type = private name = "private_0x00000000013c0000" filename = "" Region: id = 306 start_va = 0x77480000 end_va = 0x77488fff entry_point = 0x77480000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 307 start_va = 0x77490000 end_va = 0x774d8fff entry_point = 0x77490000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 308 start_va = 0x774e0000 end_va = 0x77547fff entry_point = 0x774e0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 309 start_va = 0x1020000 end_va = 0x102ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001020000" filename = "" Region: id = 310 start_va = 0x11d0000 end_va = 0x124dfff entry_point = 0x11d0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 311 start_va = 0x1590000 end_va = 0x168ffff entry_point = 0x0 region_type = private name = "private_0x0000000001590000" filename = "" Region: id = 312 start_va = 0x74eb0000 end_va = 0x74f05fff entry_point = 0x74eb0000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 313 start_va = 0x755f0000 end_va = 0x7572ffff entry_point = 0x755f0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 314 start_va = 0x75950000 end_va = 0x75a1efff entry_point = 0x75950000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 315 start_va = 0x7f4e0000 end_va = 0x7f5dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007f4e0000" filename = "" Region: id = 316 start_va = 0x1030000 end_va = 0x1033fff entry_point = 0x0 region_type = private name = "private_0x0000000001030000" filename = "" Region: id = 317 start_va = 0x1360000 end_va = 0x136ffff entry_point = 0x0 region_type = private name = "private_0x0000000001360000" filename = "" Region: id = 318 start_va = 0x1550000 end_va = 0x155ffff entry_point = 0x0 region_type = private name = "private_0x0000000001550000" filename = "" Region: id = 319 start_va = 0x74300000 end_va = 0x74398fff entry_point = 0x74300000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 320 start_va = 0x74f10000 end_va = 0x74f62fff entry_point = 0x74f10000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 321 start_va = 0x74f70000 end_va = 0x74f78fff entry_point = 0x74f70000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 322 start_va = 0x74f80000 end_va = 0x74f9cfff entry_point = 0x74f80000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 323 start_va = 0x74fb0000 end_va = 0x75027fff entry_point = 0x74fb0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 324 start_va = 0x75730000 end_va = 0x757e0fff entry_point = 0x75730000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 325 start_va = 0x75be0000 end_va = 0x75c1dfff entry_point = 0x75be0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 326 start_va = 0x773a0000 end_va = 0x7745dfff entry_point = 0x773a0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 327 start_va = 0x74e30000 end_va = 0x74eadfff entry_point = 0x74e30000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 328 start_va = 0x1040000 end_va = 0x1040fff entry_point = 0x0 region_type = private name = "private_0x0000000001040000" filename = "" Region: id = 329 start_va = 0x1250000 end_va = 0x1250fff entry_point = 0x0 region_type = private name = "private_0x0000000001250000" filename = "" Region: id = 330 start_va = 0x1690000 end_va = 0x1817fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001690000" filename = "" Region: id = 331 start_va = 0x1820000 end_va = 0x19a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001820000" filename = "" Region: id = 332 start_va = 0x19b0000 end_va = 0x2daffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000019b0000" filename = "" Region: id = 333 start_va = 0x75040000 end_va = 0x7518dfff entry_point = 0x75040000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 334 start_va = 0x75190000 end_va = 0x75297fff entry_point = 0x75190000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 335 start_va = 0x754c0000 end_va = 0x755b6fff entry_point = 0x754c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 336 start_va = 0x755c0000 end_va = 0x755e4fff entry_point = 0x755c0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 337 start_va = 0x75d40000 end_va = 0x75d80fff entry_point = 0x75d40000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 338 start_va = 0x75e30000 end_va = 0x75f7efff entry_point = 0x75e30000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 339 start_va = 0x746b0000 end_va = 0x74786fff entry_point = 0x746b0000 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll") Region: id = 340 start_va = 0x74790000 end_va = 0x74e2afff entry_point = 0x74790000 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 341 start_va = 0x1260000 end_va = 0x1260fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001260000" filename = "" Region: id = 342 start_va = 0x1270000 end_va = 0x127ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001270000" filename = "" Region: id = 343 start_va = 0x1280000 end_va = 0x128ffff entry_point = 0x0 region_type = private name = "private_0x0000000001280000" filename = "" Region: id = 344 start_va = 0x1290000 end_va = 0x129ffff entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 345 start_va = 0x12a0000 end_va = 0x12affff entry_point = 0x0 region_type = private name = "private_0x00000000012a0000" filename = "" Region: id = 346 start_va = 0x12b0000 end_va = 0x12bffff entry_point = 0x0 region_type = private name = "private_0x00000000012b0000" filename = "" Region: id = 347 start_va = 0x12c0000 end_va = 0x12cffff entry_point = 0x0 region_type = private name = "private_0x00000000012c0000" filename = "" Region: id = 348 start_va = 0x12d0000 end_va = 0x12d0fff entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 349 start_va = 0x12e0000 end_va = 0x12e0fff entry_point = 0x0 region_type = private name = "private_0x00000000012e0000" filename = "" Region: id = 350 start_va = 0x12f0000 end_va = 0x132ffff entry_point = 0x0 region_type = private name = "private_0x00000000012f0000" filename = "" Region: id = 351 start_va = 0x1350000 end_va = 0x135ffff entry_point = 0x0 region_type = private name = "private_0x0000000001350000" filename = "" Region: id = 352 start_va = 0x1370000 end_va = 0x13affff entry_point = 0x0 region_type = private name = "private_0x0000000001370000" filename = "" Region: id = 353 start_va = 0x1450000 end_va = 0x145ffff entry_point = 0x0 region_type = private name = "private_0x0000000001450000" filename = "" Region: id = 354 start_va = 0x1460000 end_va = 0x14fffff entry_point = 0x0 region_type = private name = "private_0x0000000001460000" filename = "" Region: id = 355 start_va = 0x2db0000 end_va = 0x2eaffff entry_point = 0x0 region_type = private name = "private_0x0000000002db0000" filename = "" Region: id = 356 start_va = 0x2eb0000 end_va = 0x4eaffff entry_point = 0x0 region_type = private name = "private_0x0000000002eb0000" filename = "" Region: id = 357 start_va = 0x4eb0000 end_va = 0x4faffff entry_point = 0x0 region_type = private name = "private_0x0000000004eb0000" filename = "" Region: id = 358 start_va = 0x4fb0000 end_va = 0x5284fff entry_point = 0x4fb0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 359 start_va = 0x72e70000 end_va = 0x73f04fff entry_point = 0x72e70000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\c90ef9a73ea0044641d31b19023aad61\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\c90ef9a73ea0044641d31b19023aad61\\mscorlib.ni.dll") Region: id = 360 start_va = 0x7f607000 end_va = 0x7f609fff entry_point = 0x0 region_type = private name = "private_0x000000007f607000" filename = "" Region: id = 361 start_va = 0x7f60a000 end_va = 0x7f60cfff entry_point = 0x0 region_type = private name = "private_0x000000007f60a000" filename = "" Region: id = 362 start_va = 0x746a0000 end_va = 0x746a8fff entry_point = 0x746a0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 363 start_va = 0x757f0000 end_va = 0x758fbfff entry_point = 0x757f0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 364 start_va = 0x74220000 end_va = 0x742fafff entry_point = 0x74220000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 365 start_va = 0x13d0000 end_va = 0x144ffff entry_point = 0x0 region_type = private name = "private_0x00000000013d0000" filename = "" Region: id = 366 start_va = 0x1330000 end_va = 0x1330fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001330000" filename = "" Region: id = 367 start_va = 0x5290000 end_va = 0x5380fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005290000" filename = "" Region: id = 368 start_va = 0x1330000 end_va = 0x1333fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001330000" filename = "" Region: id = 369 start_va = 0x1340000 end_va = 0x1343fff entry_point = 0x0 region_type = private name = "private_0x0000000001340000" filename = "" Region: id = 370 start_va = 0x71e30000 end_va = 0x724d2fff entry_point = 0x71e30000 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\c1194e56644c7688e7eb0f68a57dcc30\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\c1194e56644c7688e7eb0f68a57dcc30\\system.core.ni.dll") Region: id = 371 start_va = 0x724e0000 end_va = 0x72e6cfff entry_point = 0x724e0000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\c24d08cc4e93fc4f6f15a637b00a2721\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\c24d08cc4e93fc4f6f15a637b00a2721\\system.ni.dll") Region: id = 372 start_va = 0x74440000 end_va = 0x744bcfff entry_point = 0x74440000 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 373 start_va = 0x744c0000 end_va = 0x74698fff entry_point = 0x744c0000 region_type = mapped_file name = "microsoft.visualbasic.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\288e4f2cf5b7a96028c8bb3fce6dc043\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\288e4f2cf5b7a96028c8bb3fce6dc043\\microsoft.visualbasic.ni.dll") Region: id = 374 start_va = 0x75c60000 end_va = 0x75ce6fff entry_point = 0x75c60000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 375 start_va = 0x13b0000 end_va = 0x13bffff entry_point = 0x0 region_type = private name = "private_0x00000000013b0000" filename = "" Region: id = 376 start_va = 0x13d0000 end_va = 0x13dffff entry_point = 0x0 region_type = private name = "private_0x00000000013d0000" filename = "" Region: id = 377 start_va = 0x13e0000 end_va = 0x13effff entry_point = 0x0 region_type = private name = "private_0x00000000013e0000" filename = "" Region: id = 378 start_va = 0x1440000 end_va = 0x144ffff entry_point = 0x0 region_type = private name = "private_0x0000000001440000" filename = "" Region: id = 379 start_va = 0x711e0000 end_va = 0x71e25fff entry_point = 0x711e0000 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\635558b506364815e8348217e86fdf99\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\635558b506364815e8348217e86fdf99\\system.windows.forms.ni.dll") Region: id = 380 start_va = 0x74060000 end_va = 0x741f1fff entry_point = 0x74060000 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\ddb52221ad0200b7c2e0a308e47d5c7c\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\ddb52221ad0200b7c2e0a308e47d5c7c\\system.drawing.ni.dll") Region: id = 381 start_va = 0x5530000 end_va = 0x553ffff entry_point = 0x0 region_type = private name = "private_0x0000000005530000" filename = "" Region: id = 382 start_va = 0x5390000 end_va = 0x5412fff entry_point = 0x5390000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_7c55c866aa0c3ff0\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_7c55c866aa0c3ff0\\comctl32.dll") Region: id = 383 start_va = 0x77280000 end_va = 0x77305fff entry_point = 0x77280000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\SysWOW64\\comctl32.dll" (normalized: "c:\\windows\\syswow64\\comctl32.dll") Region: id = 384 start_va = 0x5540000 end_va = 0x570ffff entry_point = 0x0 region_type = private name = "private_0x0000000005540000" filename = "" Region: id = 385 start_va = 0x74200000 end_va = 0x74217fff entry_point = 0x74200000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 386 start_va = 0x71110000 end_va = 0x711d4fff entry_point = 0x71110000 region_type = mapped_file name = "system.runtime.remoting.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\0139b8d6c29df85226a7fe833e5cc4f1\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\0139b8d6c29df85226a7fe833e5cc4f1\\system.runtime.remoting.ni.dll") Region: id = 387 start_va = 0x7f480000 end_va = 0x7f48ffff entry_point = 0x0 region_type = private name = "private_0x000000007f480000" filename = "" Region: id = 388 start_va = 0x7f490000 end_va = 0x7f4dffff entry_point = 0x0 region_type = private name = "private_0x000000007f490000" filename = "" Region: id = 389 start_va = 0x13f0000 end_va = 0x13f1fff entry_point = 0x13f0000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 390 start_va = 0x1400000 end_va = 0x1402fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001400000" filename = "" Region: id = 391 start_va = 0x1410000 end_va = 0x1410fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001410000" filename = "" Region: id = 392 start_va = 0x1420000 end_va = 0x1427fff entry_point = 0x1420000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\System32\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tzres.dll.mui") Region: id = 393 start_va = 0x13f0000 end_va = 0x13f1fff entry_point = 0x13f0000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 394 start_va = 0x1420000 end_va = 0x1427fff entry_point = 0x1420000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\System32\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tzres.dll.mui") Region: id = 395 start_va = 0x77130000 end_va = 0x7727cfff entry_point = 0x77130000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\SysWOW64\\GdiPlus.dll" (normalized: "c:\\windows\\syswow64\\gdiplus.dll") Region: id = 396 start_va = 0x5390000 end_va = 0x54dffff entry_point = 0x0 region_type = private name = "private_0x0000000005390000" filename = "" Region: id = 397 start_va = 0x1500000 end_va = 0x153ffff entry_point = 0x0 region_type = private name = "private_0x0000000001500000" filename = "" Region: id = 398 start_va = 0x5390000 end_va = 0x548ffff entry_point = 0x0 region_type = private name = "private_0x0000000005390000" filename = "" Region: id = 399 start_va = 0x54d0000 end_va = 0x54dffff entry_point = 0x0 region_type = private name = "private_0x00000000054d0000" filename = "" Region: id = 400 start_va = 0x70f90000 end_va = 0x71101fff entry_point = 0x70f90000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\SysWOW64\\DWrite.dll" (normalized: "c:\\windows\\syswow64\\dwrite.dll") Region: id = 401 start_va = 0x7f47d000 end_va = 0x7f47ffff entry_point = 0x0 region_type = private name = "private_0x000000007f47d000" filename = "" Region: id = 402 start_va = 0x5540000 end_va = 0x55e4fff entry_point = 0x5540000 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\~fontcache-system.dat") Region: id = 403 start_va = 0x5700000 end_va = 0x570ffff entry_point = 0x0 region_type = private name = "private_0x0000000005700000" filename = "" Region: id = 404 start_va = 0x13f0000 end_va = 0x13f3fff entry_point = 0x0 region_type = private name = "private_0x00000000013f0000" filename = "" Region: id = 405 start_va = 0x1420000 end_va = 0x1423fff entry_point = 0x0 region_type = private name = "private_0x0000000001420000" filename = "" Region: id = 406 start_va = 0x55f0000 end_va = 0x56effff entry_point = 0x0 region_type = private name = "private_0x00000000055f0000" filename = "" Region: id = 407 start_va = 0x5710000 end_va = 0x5c01fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005710000" filename = "" Region: id = 408 start_va = 0x5c10000 end_va = 0x6c0ffff entry_point = 0x5c10000 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\~fontcache-fontface.dat") Region: id = 409 start_va = 0x73fc0000 end_va = 0x7403ffff entry_point = 0x73fc0000 region_type = mapped_file name = "riched20.dll" filename = "\\Windows\\SysWOW64\\riched20.dll" (normalized: "c:\\windows\\syswow64\\riched20.dll") Region: id = 410 start_va = 0x73fa0000 end_va = 0x73fb3fff entry_point = 0x73fa0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 411 start_va = 0x73f60000 end_va = 0x73f90fff entry_point = 0x73f60000 region_type = mapped_file name = "msls31.dll" filename = "\\Windows\\SysWOW64\\msls31.dll" (normalized: "c:\\windows\\syswow64\\msls31.dll") Region: id = 412 start_va = 0x70df0000 end_va = 0x70df7fff entry_point = 0x70df0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 413 start_va = 0x6c10000 end_va = 0x700bfff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006c10000" filename = "" Region: id = 414 start_va = 0x7010000 end_va = 0x7e7ffff entry_point = 0x7010000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 415 start_va = 0x7e80000 end_va = 0x7ee0fff entry_point = 0x7e80000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll") Region: id = 416 start_va = 0x1430000 end_va = 0x1430fff entry_point = 0x0 region_type = private name = "private_0x0000000001430000" filename = "" Region: id = 417 start_va = 0x1540000 end_va = 0x1544fff entry_point = 0x1540000 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 418 start_va = 0x1560000 end_va = 0x1560fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001560000" filename = "" Region: id = 419 start_va = 0x7ef0000 end_va = 0x7f6ffff entry_point = 0x0 region_type = private name = "private_0x0000000007ef0000" filename = "" Region: id = 420 start_va = 0x1560000 end_va = 0x1563fff entry_point = 0x0 region_type = private name = "private_0x0000000001560000" filename = "" Region: id = 421 start_va = 0x7f70000 end_va = 0x8070fff entry_point = 0x0 region_type = private name = "private_0x0000000007f70000" filename = "" Region: id = 422 start_va = 0x1570000 end_va = 0x1572fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001570000" filename = "" Region: id = 423 start_va = 0x70c00000 end_va = 0x70de5fff entry_point = 0x70c00000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7\\comctl32.dll") Region: id = 424 start_va = 0x1580000 end_va = 0x1580fff entry_point = 0x1580000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 425 start_va = 0x5490000 end_va = 0x5491fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005490000" filename = "" Region: id = 426 start_va = 0x1580000 end_va = 0x158ffff entry_point = 0x0 region_type = private name = "private_0x0000000001580000" filename = "" Region: id = 427 start_va = 0x75f80000 end_va = 0x7712cfff entry_point = 0x75f80000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 428 start_va = 0x54a0000 end_va = 0x54affff entry_point = 0x0 region_type = private name = "private_0x00000000054a0000" filename = "" Region: id = 429 start_va = 0x743c0000 end_va = 0x74435fff entry_point = 0x743c0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 430 start_va = 0x54a0000 end_va = 0x54a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000054a0000" filename = "" Region: id = 431 start_va = 0x54b0000 end_va = 0x54bffff entry_point = 0x0 region_type = private name = "private_0x00000000054b0000" filename = "" Region: id = 432 start_va = 0x7f70000 end_va = 0x80d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007f70000" filename = "" Region: id = 433 start_va = 0x54b0000 end_va = 0x54b0fff entry_point = 0x0 region_type = private name = "private_0x00000000054b0000" filename = "" Region: id = 434 start_va = 0x54c0000 end_va = 0x54c0fff entry_point = 0x0 region_type = private name = "private_0x00000000054c0000" filename = "" Region: id = 435 start_va = 0x54b0000 end_va = 0x54b0fff entry_point = 0x0 region_type = private name = "private_0x00000000054b0000" filename = "" Region: id = 436 start_va = 0x54b0000 end_va = 0x54b4fff entry_point = 0x0 region_type = private name = "private_0x00000000054b0000" filename = "" Region: id = 437 start_va = 0x54e0000 end_va = 0x54e0fff entry_point = 0x0 region_type = private name = "private_0x00000000054e0000" filename = "" Region: id = 438 start_va = 0x54f0000 end_va = 0x5507fff entry_point = 0x0 region_type = private name = "private_0x00000000054f0000" filename = "" Region: id = 439 start_va = 0x54b0000 end_va = 0x54b7fff entry_point = 0x0 region_type = private name = "private_0x00000000054b0000" filename = "" Region: id = 440 start_va = 0x5510000 end_va = 0x5510fff entry_point = 0x0 region_type = private name = "private_0x0000000005510000" filename = "" Region: id = 441 start_va = 0x54e0000 end_va = 0x54effff entry_point = 0x0 region_type = private name = "private_0x00000000054e0000" filename = "" Region: id = 442 start_va = 0x54f0000 end_va = 0x54fffff entry_point = 0x0 region_type = private name = "private_0x00000000054f0000" filename = "" Region: id = 443 start_va = 0x74040000 end_va = 0x74057fff entry_point = 0x74040000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 444 start_va = 0x70f60000 end_va = 0x70f8efff entry_point = 0x70f60000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 445 start_va = 0x743a0000 end_va = 0x743bcfff entry_point = 0x743a0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 446 start_va = 0x70f50000 end_va = 0x70f5dfff entry_point = 0x70f50000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 447 start_va = 0x54e0000 end_va = 0x54e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000054e0000" filename = "" Region: id = 448 start_va = 0x54f0000 end_va = 0x54f0fff entry_point = 0x0 region_type = private name = "private_0x00000000054f0000" filename = "" Region: id = 449 start_va = 0x54c0000 end_va = 0x54c0fff entry_point = 0x0 region_type = private name = "private_0x00000000054c0000" filename = "" Region: id = 450 start_va = 0x54f0000 end_va = 0x5507fff entry_point = 0x0 region_type = private name = "private_0x00000000054f0000" filename = "" Thread: id = 9 os_tid = 0x9e4 [0091.514] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0091.522] RoInitialize () returned 0x1 [0091.522] RoUninitialize () returned 0x1 [0091.836] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc17a [0091.836] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc17f [0091.868] EtwEventRegister (in: ProviderId=0x2eb2cc4, EnableCallback=0x55305be, CallbackContext=0x0, RegHandle=0x2eb2c9c | out: RegHandle=0x2eb2c9c) returned 0x0 [0091.881] GetCurrentProcess () returned 0xffffffff [0091.881] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x119ef18 | out: TokenHandle=0x119ef18*=0x218) returned 1 [0091.887] GetCurrentProcess () returned 0xffffffff [0091.887] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x119ef74, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x119ef74*=0x21c) returned 1 [0091.900] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0091.901] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x77280000 [0091.933] GetModuleHandleW (lpModuleName="user32.dll") returned 0x75e30000 [0091.933] GetProcAddress (hModule=0x75e30000, lpProcName="DefWindowProcW") returned 0x7431bdea [0091.933] GetStockObject (i=5) returned 0x1900015 [0091.944] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0091.945] CoTaskMemAlloc (cb=0x5c) returned 0x15ec728 [0091.945] RegisterClassW (lpWndClass=0x119ed8c) returned 0xc17b [0091.945] CoTaskMemFree (pv=0x15ec728) [0091.945] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0091.946] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x302a4 [0091.946] SetWindowLongW (hWnd=0x302a4, nIndex=-4, dwNewLong=1949416938) returned 89327078 [0091.946] GetWindowLongW (hWnd=0x302a4, nIndex=-4) returned 1949416938 [0091.949] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x119e628 | out: phkResult=0x119e628*=0x230) returned 0x0 [0091.949] RegQueryValueExW (in: hKey=0x230, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x119e648, lpData=0x0, lpcbData=0x119e644*=0x0 | out: lpType=0x119e648*=0x0, lpData=0x0, lpcbData=0x119e644*=0x0) returned 0x2 [0091.949] RegQueryValueExW (in: hKey=0x230, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x119e648, lpData=0x0, lpcbData=0x119e644*=0x0 | out: lpType=0x119e648*=0x0, lpData=0x0, lpcbData=0x119e644*=0x0) returned 0x2 [0091.949] RegCloseKey (hKey=0x230) returned 0x0 [0091.950] SetWindowLongW (hWnd=0x302a4, nIndex=-4, dwNewLong=89327118) returned 1949416938 [0091.950] GetWindowLongW (hWnd=0x302a4, nIndex=-4) returned 89327118 [0091.950] GetWindowLongW (hWnd=0x302a4, nIndex=-16) returned 113311744 [0091.951] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc121 [0091.951] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc178 [0091.951] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x302a4, Msg=0x81, wParam=0x0, lParam=0x119e910) returned 0x1 [0091.951] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x302a4, Msg=0x83, wParam=0x0, lParam=0x119e8fc) returned 0x0 [0091.952] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x302a4, Msg=0x1, wParam=0x0, lParam=0x119e910) returned 0x0 [0091.952] GetClientRect (in: hWnd=0x302a4, lpRect=0x119e65c | out: lpRect=0x119e65c) returned 1 [0091.953] GetWindowRect (in: hWnd=0x302a4, lpRect=0x119e65c | out: lpRect=0x119e65c) returned 1 [0091.953] GetParent (hWnd=0x302a4) returned 0x0 [0092.047] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.049] AdjustWindowRectEx (in: lpRect=0x119ee80, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x119ee80) returned 1 [0092.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x119e904, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0092.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x119e83c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0092.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed50) returned 1 [0092.069] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0092.069] GetFileType (hFile=0x238) returned 0x1 [0092.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed4c) returned 1 [0092.069] GetFileType (hFile=0x238) returned 0x1 [0092.070] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.073] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.073] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.073] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.073] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.073] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.074] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.074] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.074] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.074] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.075] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.075] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.075] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.075] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.076] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.076] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.076] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.076] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.077] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.077] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.077] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.078] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.078] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.078] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.079] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.079] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.079] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.080] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.080] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.080] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.081] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.081] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.081] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.081] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.082] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.082] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.082] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.083] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.083] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.083] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.084] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.084] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.084] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.084] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.085] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.085] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.085] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.086] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.089] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.089] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.089] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.089] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.090] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.090] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.090] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.090] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.091] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.091] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.091] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.091] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.092] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.092] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.092] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.092] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.092] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.092] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.092] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.092] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.092] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.093] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.093] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.093] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.093] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.093] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.093] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.094] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.094] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.094] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.094] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.094] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.094] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.095] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.095] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.095] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.095] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.095] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.096] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.096] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.096] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.096] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.096] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.096] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.097] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.097] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.097] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.097] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.097] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.097] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x1000, lpOverlapped=0x0) returned 1 [0092.097] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x405, lpOverlapped=0x0) returned 1 [0092.097] ReadFile (in: hFile=0x238, lpBuffer=0x2ebba2d, nNumberOfBytesToRead=0x3fb, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebba2d*, lpNumberOfBytesRead=0x119edfc*=0x0, lpOverlapped=0x0) returned 1 [0092.097] ReadFile (in: hFile=0x238, lpBuffer=0x2ebc69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119edfc, lpOverlapped=0x0 | out: lpBuffer=0x2ebc69c*, lpNumberOfBytesRead=0x119edfc*=0x0, lpOverlapped=0x0) returned 1 [0092.100] CloseHandle (hObject=0x238) returned 1 [0092.120] GetTimeZoneInformation (in: lpTimeZoneInformation=0x119ed00 | out: lpTimeZoneInformation=0x119ed00) returned 0x0 [0092.212] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.212] AdjustWindowRectEx (in: lpRect=0x119e7f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e7f0) returned 1 [0092.217] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.217] AdjustWindowRectEx (in: lpRect=0x119e7f8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e7f8) returned 1 [0092.225] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.225] AdjustWindowRectEx (in: lpRect=0x119e7fc, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e7fc) returned 1 [0092.226] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.227] AdjustWindowRectEx (in: lpRect=0x119e7f4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e7f4) returned 1 [0092.228] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.228] AdjustWindowRectEx (in: lpRect=0x119e7f8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e7f8) returned 1 [0092.232] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.232] AdjustWindowRectEx (in: lpRect=0x119e7fc, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e7fc) returned 1 [0092.233] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.233] AdjustWindowRectEx (in: lpRect=0x119e7f4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e7f4) returned 1 [0092.235] GetSystemDefaultLCID () returned 0x409 [0092.235] GetStockObject (i=17) returned 0x10a0047 [0092.240] GetObjectW (in: h=0x10a0047, c=92, pv=0x119e5cc | out: pv=0x119e5cc) returned 92 [0092.240] GetDC (hWnd=0x0) returned 0x470108fd [0092.245] GdiplusStartup (in: token=0x12a69d8, input=0x119dba0, output=0x119dbf0 | out: token=0x12a69d8, output=0x119dbf0) returned 0x0 [0092.248] CoTaskMemAlloc (cb=0x5c) returned 0x15ec728 [0092.248] GdipCreateFontFromLogfontW (hdc=0x470108fd, logfont=0x15ec728, font=0x119e690) returned 0x0 [0092.285] CoTaskMemFree (pv=0x15ec728) [0092.286] CoTaskMemAlloc (cb=0x5c) returned 0x15ecad0 [0092.286] CoTaskMemFree (pv=0x15ecad0) [0092.286] CoTaskMemAlloc (cb=0x5c) returned 0x15ec8c8 [0092.286] CoTaskMemFree (pv=0x15ec8c8) [0092.286] GdipGetFontUnit (font=0x54d1f08, unit=0x119e65c) returned 0x0 [0092.286] GdipGetFontSize (font=0x54d1f08, size=0x119e660) returned 0x0 [0092.287] GdipGetFontStyle (font=0x54d1f08, style=0x119e658) returned 0x0 [0092.287] GdipGetFamily (font=0x54d1f08, family=0x119e654) returned 0x0 [0092.287] GdipGetFontSize (font=0x54d1f08, size=0x2ebb8e4) returned 0x0 [0092.287] ReleaseDC (hWnd=0x0, hDC=0x470108fd) returned 1 [0092.288] GetDC (hWnd=0x0) returned 0xe010919 [0092.288] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e674) returned 0x0 [0092.288] GdipGetDpiY (graphics=0x56086d8, dpi=0x2ebb9ec) returned 0x0 [0092.288] GdipGetFontHeight (font=0x54d1f08, graphics=0x56086d8, height=0x119e66c) returned 0x0 [0092.289] GdipGetEmHeight (family=0x55f5350, style=0, EmHeight=0x119e674) returned 0x0 [0092.289] GdipGetLineSpacing (family=0x55f5350, style=0, LineSpacing=0x119e674) returned 0x0 [0092.289] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.289] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.289] GdipCreateFont (fontFamily=0x55f5350, emSize=0x41040000, style=0, unit=0x3, font=0x2ebb9ac) returned 0x0 [0092.289] GdipGetFontSize (font=0x54def18, size=0x2ebb9b0) returned 0x0 [0092.290] GdipDeleteFont (font=0x54d1f08) returned 0x0 [0092.290] GetDC (hWnd=0x0) returned 0xe010919 [0092.290] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e6dc) returned 0x0 [0092.290] GdipGetFontHeight (font=0x54def18, graphics=0x56086d8, height=0x119e6d4) returned 0x0 [0092.290] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.290] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.290] GetSystemMetrics (nIndex=5) returned 1 [0092.290] GetSystemMetrics (nIndex=6) returned 1 [0092.290] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.291] AdjustWindowRectEx (in: lpRect=0x119e7f4, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e7f4) returned 1 [0092.293] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.293] AdjustWindowRectEx (in: lpRect=0x119e7fc, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e7fc) returned 1 [0092.294] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.294] AdjustWindowRectEx (in: lpRect=0x119e7fc, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e7fc) returned 1 [0092.295] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.295] AdjustWindowRectEx (in: lpRect=0x119e7f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e7f0) returned 1 [0092.300] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.300] AdjustWindowRectEx (in: lpRect=0x119e7e0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e7e0) returned 1 [0092.306] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.306] AdjustWindowRectEx (in: lpRect=0x119e7f4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e7f4) returned 1 [0092.308] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.308] AdjustWindowRectEx (in: lpRect=0x119e7fc, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e7fc) returned 1 [0092.309] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.309] AdjustWindowRectEx (in: lpRect=0x119e7f4, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e7f4) returned 1 [0092.310] GetDC (hWnd=0x0) returned 0xe010919 [0092.310] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e6dc) returned 0x0 [0092.310] GdipGetFontHeight (font=0x54def18, graphics=0x56086d8, height=0x119e6d4) returned 0x0 [0092.310] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.310] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.310] GetSystemMetrics (nIndex=5) returned 1 [0092.310] GetSystemMetrics (nIndex=6) returned 1 [0092.310] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.310] AdjustWindowRectEx (in: lpRect=0x119e7f4, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e7f4) returned 1 [0092.312] LoadLibraryW (lpLibFileName="RichEd20.DLL") returned 0x73fc0000 [0092.523] CoTaskMemAlloc (cb=0x20c) returned 0x15ff660 [0092.523] GetModuleFileNameW (in: hModule=0x73fc0000, lpFilename=0x15ff660, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL" (normalized: "c:\\windows\\system32\\riched20.dll")) returned 0x20 [0092.523] CoTaskMemFree (pv=0x15ff660) [0092.523] GetFullPathNameW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0x119e184, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0092.524] GetFullPathNameW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0x119e19c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0092.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119e61c) returned 1 [0092.524] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL" (normalized: "c:\\windows\\system32\\riched20.dll"), fInfoLevelId=0x0, lpFileInformation=0x119e698 | out: lpFileInformation=0x119e698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a4a7cf, ftCreationTime.dwHighDateTime=0x1cebd93, ftLastAccessTime.dwLowDateTime=0x64a4a7cf, ftLastAccessTime.dwHighDateTime=0x1cebd93, ftLastWriteTime.dwLowDateTime=0x64a4a7cf, ftLastWriteTime.dwHighDateTime=0x1cebd93, nFileSizeHigh=0x0, nFileSizeLow=0x7d600)) returned 1 [0092.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119e618) returned 1 [0092.525] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpdwHandle=0x119e718 | out: lpdwHandle=0x119e718) returned 0x72c [0092.526] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL", dwHandle=0x0, dwLen=0x72c, lpData=0x2ebd42c | out: lpData=0x2ebd42c) returned 1 [0092.526] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x119e6ec, puLen=0x119e6e8 | out: lplpBuffer=0x119e6ec*=0x2ebd7bc, puLen=0x119e6e8) returned 1 [0092.528] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x119e66c, puLen=0x119e668 | out: lplpBuffer=0x119e66c*=0x2ebd528, puLen=0x119e668) returned 1 [0092.528] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x119e66c, puLen=0x119e668 | out: lplpBuffer=0x119e66c*=0x2ebd57c, puLen=0x119e668) returned 1 [0092.528] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x119e66c, puLen=0x119e668 | out: lplpBuffer=0x119e66c*=0x2ebd5d8, puLen=0x119e668) returned 1 [0092.528] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x119e66c, puLen=0x119e668 | out: lplpBuffer=0x119e66c*=0x2ebd614, puLen=0x119e668) returned 1 [0092.528] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x119e66c, puLen=0x119e668 | out: lplpBuffer=0x119e66c*=0x2ebd64c, puLen=0x119e668) returned 1 [0092.528] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x119e66c, puLen=0x119e668 | out: lplpBuffer=0x119e66c*=0x2ebd6c4, puLen=0x119e668) returned 1 [0092.528] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x119e66c, puLen=0x119e668 | out: lplpBuffer=0x119e66c*=0x2ebd700, puLen=0x119e668) returned 1 [0092.528] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x119e66c, puLen=0x119e668 | out: lplpBuffer=0x119e66c*=0x2ebd774, puLen=0x119e668) returned 1 [0092.528] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x119e66c, puLen=0x119e668 | out: lplpBuffer=0x119e66c*=0x2ebd4dc, puLen=0x119e668) returned 1 [0092.528] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x119e66c, puLen=0x119e668 | out: lplpBuffer=0x119e66c*=0x0, puLen=0x119e668) returned 0 [0092.528] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x119e66c, puLen=0x119e668 | out: lplpBuffer=0x119e66c*=0x0, puLen=0x119e668) returned 0 [0092.528] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x119e66c, puLen=0x119e668 | out: lplpBuffer=0x119e66c*=0x0, puLen=0x119e668) returned 0 [0092.528] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x119e660, puLen=0x119e65c | out: lplpBuffer=0x119e660*=0x2ebd7bc, puLen=0x119e65c) returned 1 [0092.528] VerLanguageNameW (in: wLang=0x0, szLang=0x119e3f0, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0092.529] VerQueryValueW (in: pBlock=0x2ebd42c, lpSubBlock="\\", lplpBuffer=0x119e670, puLen=0x119e66c | out: lplpBuffer=0x119e670*=0x2ebd454, puLen=0x119e66c) returned 1 [0092.530] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.530] AdjustWindowRectEx (in: lpRect=0x119e7ec, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e7ec) returned 1 [0092.530] GetDC (hWnd=0x0) returned 0xe010919 [0092.530] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e730) returned 0x0 [0092.531] GdipGetFontHeight (font=0x54def18, graphics=0x56086d8, height=0x119e728) returned 0x0 [0092.531] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.531] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.531] GetSystemMetrics (nIndex=5) returned 1 [0092.531] GetSystemMetrics (nIndex=6) returned 1 [0092.538] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.538] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e780) returned 1 [0092.539] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.539] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e780) returned 1 [0092.541] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.541] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e780) returned 1 [0092.541] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.542] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e780) returned 1 [0092.544] GetCurrentThreadId () returned 0x9e4 [0092.544] GetCurrentThreadId () returned 0x9e4 [0092.544] GetCurrentThreadId () returned 0x9e4 [0092.544] GetCurrentThreadId () returned 0x9e4 [0092.547] GetUserObjectInformationA (in: hObj=0xa4, nIndex=1, pvInfo=0x2ebf77c, nLength=0xc, lpnLengthNeeded=0x119e6b8 | out: pvInfo=0x2ebf77c, lpnLengthNeeded=0x119e6b8) returned 1 [0092.548] SetConsoleCtrlHandler (HandlerRoutine=0x5530636, Add=1) returned 1 [0092.548] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.549] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.549] GetClassInfoW (in: hInstance=0xfb0000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.2bf8098.0", lpWndClass=0x2ebf7e0 | out: lpWndClass=0x2ebf7e0) returned 0 [0092.550] CoTaskMemAlloc (cb=0x58) returned 0x15fe238 [0092.550] RegisterClassW (lpWndClass=0x119e60c) returned 0xc177 [0092.550] CoTaskMemFree (pv=0x15fe238) [0092.551] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.2bf8098.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.2bf8098.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x30254 [0092.552] NtdllDefWindowProc_W (hWnd=0x30254, Msg=0x83, wParam=0x0, lParam=0x119e14c) returned 0x0 [0092.553] NtdllDefWindowProc_W (hWnd=0x30254, Msg=0x1, wParam=0x0, lParam=0x119e160) returned 0x0 [0092.553] NtdllDefWindowProc_W (hWnd=0x30254, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0092.553] NtdllDefWindowProc_W (hWnd=0x30254, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0092.554] GetSysColor (nIndex=10) returned 0xb4b4b4 [0092.554] GetSysColor (nIndex=2) returned 0xd1b499 [0092.554] GetSysColor (nIndex=9) returned 0x0 [0092.554] GetSysColor (nIndex=12) returned 0xababab [0092.554] GetSysColor (nIndex=15) returned 0xf0f0f0 [0092.554] GetSysColor (nIndex=20) returned 0xffffff [0092.554] GetSysColor (nIndex=16) returned 0xa0a0a0 [0092.554] GetSysColor (nIndex=15) returned 0xf0f0f0 [0092.554] GetSysColor (nIndex=16) returned 0xa0a0a0 [0092.554] GetSysColor (nIndex=21) returned 0x696969 [0092.554] GetSysColor (nIndex=22) returned 0xe3e3e3 [0092.554] GetSysColor (nIndex=20) returned 0xffffff [0092.554] GetSysColor (nIndex=18) returned 0x0 [0092.554] GetSysColor (nIndex=1) returned 0x0 [0092.554] GetSysColor (nIndex=27) returned 0xead1b9 [0092.554] GetSysColor (nIndex=28) returned 0xf2e4d7 [0092.554] GetSysColor (nIndex=17) returned 0x6d6d6d [0092.554] GetSysColor (nIndex=13) returned 0xff9933 [0092.554] GetSysColor (nIndex=14) returned 0xffffff [0092.554] GetSysColor (nIndex=26) returned 0xcc6600 [0092.554] GetSysColor (nIndex=11) returned 0xfcf7f4 [0092.554] GetSysColor (nIndex=3) returned 0xdbcdbf [0092.554] GetSysColor (nIndex=19) returned 0x0 [0092.554] GetSysColor (nIndex=24) returned 0xe1ffff [0092.554] GetSysColor (nIndex=23) returned 0x0 [0092.554] GetSysColor (nIndex=4) returned 0xf0f0f0 [0092.555] GetSysColor (nIndex=30) returned 0xf0f0f0 [0092.555] GetSysColor (nIndex=29) returned 0xff9933 [0092.555] GetSysColor (nIndex=7) returned 0x0 [0092.555] GetSysColor (nIndex=0) returned 0xc8c8c8 [0092.555] GetSysColor (nIndex=5) returned 0xffffff [0092.555] GetSysColor (nIndex=6) returned 0x646464 [0092.555] GetSysColor (nIndex=8) returned 0x0 [0092.556] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.556] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e780) returned 1 [0092.557] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.557] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e780) returned 1 [0092.557] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.557] AdjustWindowRectEx (in: lpRect=0x119e754, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e754) returned 1 [0092.557] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.558] AdjustWindowRectEx (in: lpRect=0x119e754, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e754) returned 1 [0092.558] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.558] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e780) returned 1 [0092.559] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.559] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e780) returned 1 [0092.560] GetCurrentThreadId () returned 0x9e4 [0092.560] GetCurrentThreadId () returned 0x9e4 [0092.560] GetCurrentThreadId () returned 0x9e4 [0092.560] GetCurrentThreadId () returned 0x9e4 [0092.561] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.561] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e780) returned 1 [0092.561] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.561] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e780) returned 1 [0092.561] GetDC (hWnd=0x0) returned 0xe010919 [0092.561] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e6c0) returned 0x0 [0092.561] GdipGetFontHeight (font=0x54def18, graphics=0x56086d8, height=0x119e6b8) returned 0x0 [0092.561] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.561] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.562] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.562] AdjustWindowRectEx (in: lpRect=0x119e634, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e634) returned 1 [0092.562] GdipGetFamilyName (in: family=0x55f5350, name=0x119e600, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0092.563] CreateCompatibleDC (hdc=0x0) returned 0x490108ba [0092.563] GetCurrentObject (hdc=0x490108ba, type=0x1) returned 0x1b00017 [0092.563] GetCurrentObject (hdc=0x490108ba, type=0x2) returned 0x1900010 [0092.563] GetCurrentObject (hdc=0x490108ba, type=0x7) returned 0x185000f [0092.563] GetCurrentObject (hdc=0x490108ba, type=0x6) returned 0x18a0048 [0092.564] SaveDC (hdc=0x490108ba) returned 1 [0092.564] GetDeviceCaps (hdc=0x490108ba, index=90) returned 96 [0092.564] CoTaskMemAlloc (cb=0x5c) returned 0x15ec790 [0092.564] CreateFontIndirectW (lplf=0x15ec790) returned 0x400a08d8 [0092.564] CoTaskMemFree (pv=0x15ec790) [0092.565] GetObjectW (in: h=0x400a08d8, c=92, pv=0x119e5c8 | out: pv=0x119e5c8) returned 92 [0092.566] GetCurrentObject (hdc=0x490108ba, type=0x6) returned 0x18a0048 [0092.566] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e5b0 | out: pv=0x119e5b0) returned 92 [0092.566] SelectObject (hdc=0x490108ba, h=0x400a08d8) returned 0x18a0048 [0092.566] GetTextExtentPoint32W (in: hdc=0x490108ba, lpString="0", c=1, psizl=0x2ec0468 | out: psizl=0x2ec0468) returned 1 [0092.578] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.578] AdjustWindowRectEx (in: lpRect=0x119e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e708) returned 1 [0092.578] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.578] AdjustWindowRectEx (in: lpRect=0x119e620, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e620) returned 1 [0092.578] GdipGetFamilyName (in: family=0x55f5350, name=0x119e5ec, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0092.578] GetDeviceCaps (hdc=0x490108ba, index=90) returned 96 [0092.578] CoTaskMemAlloc (cb=0x5c) returned 0x15ec728 [0092.578] CreateFontIndirectW (lplf=0x15ec728) returned 0xb00a08b8 [0092.578] CoTaskMemFree (pv=0x15ec728) [0092.578] GetObjectW (in: h=0xb00a08b8, c=92, pv=0x119e5b4 | out: pv=0x119e5b4) returned 92 [0092.578] GetTextExtentPoint32W (in: hdc=0x490108ba, lpString="0", c=1, psizl=0x2ec079c | out: psizl=0x2ec079c) returned 1 [0092.579] DeleteObject (ho=0xb00a08b8) returned 1 [0092.579] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.579] AdjustWindowRectEx (in: lpRect=0x119e754, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e754) returned 1 [0092.579] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.579] AdjustWindowRectEx (in: lpRect=0x119e620, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e620) returned 1 [0092.579] GdipGetFamilyName (in: family=0x55f5350, name=0x119e5ec, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0092.579] GetDeviceCaps (hdc=0x490108ba, index=90) returned 96 [0092.579] CoTaskMemAlloc (cb=0x5c) returned 0x15ec728 [0092.579] CreateFontIndirectW (lplf=0x15ec728) returned 0xb10a08b8 [0092.579] CoTaskMemFree (pv=0x15ec728) [0092.579] GetObjectW (in: h=0xb10a08b8, c=92, pv=0x119e5b4 | out: pv=0x119e5b4) returned 92 [0092.579] GetTextExtentPoint32W (in: hdc=0x490108ba, lpString="0", c=1, psizl=0x2ec09e8 | out: psizl=0x2ec09e8) returned 1 [0092.580] DeleteObject (ho=0xb10a08b8) returned 1 [0092.580] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.580] AdjustWindowRectEx (in: lpRect=0x119e5fc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e5fc) returned 1 [0092.581] GdipGetFamilyName (in: family=0x55f5350, name=0x119e4f0, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0092.581] GetDeviceCaps (hdc=0x490108ba, index=90) returned 96 [0092.581] CoTaskMemAlloc (cb=0x5c) returned 0x15ec450 [0092.581] CreateFontIndirectW (lplf=0x15ec450) returned 0xb20a08b8 [0092.581] CoTaskMemFree (pv=0x15ec450) [0092.581] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119e4b8 | out: pv=0x119e4b8) returned 92 [0092.581] GetMapMode (hdc=0x490108ba) returned 1 [0092.582] GetTextMetricsW (in: hdc=0x490108ba, lptm=0x119e4dc | out: lptm=0x119e4dc) returned 1 [0092.582] DrawTextExW (in: hdc=0x490108ba, lpchText="Send 100$ to this bitcoins adress:", cchText=34, lprc=0x119e5e8, format=0x2400, lpdtp=0x2ec0d04 | out: lpchText="Send 100$ to this bitcoins adress:", lprc=0x119e5e8) returned 13 [0092.598] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.598] AdjustWindowRectEx (in: lpRect=0x119e6d0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e6d0) returned 1 [0092.598] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x119e7d0) returned 0x0 [0092.598] GdipCreateFont (fontFamily=0x55f5350, emSize=0x41040000, style=2, unit=0x3, font=0x2ec0d80) returned 0x0 [0092.598] GdipGetFontSize (font=0x54d1f08, size=0x2ec0d84) returned 0x0 [0092.598] GetDC (hWnd=0x0) returned 0xe010919 [0092.598] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e790) returned 0x0 [0092.599] GdipGetFontHeight (font=0x54d1f08, graphics=0x56086d8, height=0x119e788) returned 0x0 [0092.599] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.599] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.599] GetDC (hWnd=0x0) returned 0xe010919 [0092.599] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e728) returned 0x0 [0092.599] GdipGetFontHeight (font=0x54d1f08, graphics=0x56086d8, height=0x119e720) returned 0x0 [0092.599] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.599] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.599] GetSystemMetrics (nIndex=5) returned 1 [0092.599] GetSystemMetrics (nIndex=6) returned 1 [0092.599] GetSystemMetrics (nIndex=5) returned 1 [0092.599] GetSystemMetrics (nIndex=6) returned 1 [0092.599] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.599] AdjustWindowRectEx (in: lpRect=0x119e758, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e758) returned 1 [0092.600] GetSystemMetrics (nIndex=5) returned 1 [0092.600] GetSystemMetrics (nIndex=6) returned 1 [0092.600] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.601] AdjustWindowRectEx (in: lpRect=0x119e758, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e758) returned 1 [0092.601] GetCurrentThreadId () returned 0x9e4 [0092.601] GetCurrentThreadId () returned 0x9e4 [0092.602] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.602] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e780) returned 1 [0092.602] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.602] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e780) returned 1 [0092.603] GetCurrentThreadId () returned 0x9e4 [0092.603] GetCurrentThreadId () returned 0x9e4 [0092.603] GetCurrentThreadId () returned 0x9e4 [0092.603] GetCurrentThreadId () returned 0x9e4 [0092.604] GetCurrentThreadId () returned 0x9e4 [0092.604] GetCurrentThreadId () returned 0x9e4 [0092.604] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.604] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e780) returned 1 [0092.604] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.604] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e780) returned 1 [0092.605] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.605] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e780) returned 1 [0092.605] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.605] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e780) returned 1 [0092.605] GetDC (hWnd=0x0) returned 0xe010919 [0092.605] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e6c0) returned 0x0 [0092.605] GdipGetFontHeight (font=0x54def18, graphics=0x56086d8, height=0x119e6b8) returned 0x0 [0092.605] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.605] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.607] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.607] AdjustWindowRectEx (in: lpRect=0x119e634, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e634) returned 1 [0092.607] GdipGetFamilyName (in: family=0x55f5350, name=0x119e600, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0092.607] GetDeviceCaps (hdc=0x490108ba, index=90) returned 96 [0092.607] CoTaskMemAlloc (cb=0x5c) returned 0x15ec8c8 [0092.607] CreateFontIndirectW (lplf=0x15ec8c8) returned 0x650a08c7 [0092.607] CoTaskMemFree (pv=0x15ec8c8) [0092.607] GetObjectW (in: h=0x650a08c7, c=92, pv=0x119e5c8 | out: pv=0x119e5c8) returned 92 [0092.607] GetTextExtentPoint32W (in: hdc=0x490108ba, lpString="0", c=1, psizl=0x2ec186c | out: psizl=0x2ec186c) returned 1 [0092.607] DeleteObject (ho=0x650a08c7) returned 1 [0092.607] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.607] AdjustWindowRectEx (in: lpRect=0x119e6e8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e6e8) returned 1 [0092.607] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.607] AdjustWindowRectEx (in: lpRect=0x119e600, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e600) returned 1 [0092.607] GdipGetFamilyName (in: family=0x55f5350, name=0x119e5cc, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0092.607] GetDeviceCaps (hdc=0x490108ba, index=90) returned 96 [0092.607] CoTaskMemAlloc (cb=0x5c) returned 0x15ec3e8 [0092.608] CreateFontIndirectW (lplf=0x15ec3e8) returned 0x660a08c7 [0092.608] CoTaskMemFree (pv=0x15ec3e8) [0092.608] GetObjectW (in: h=0x660a08c7, c=92, pv=0x119e594 | out: pv=0x119e594) returned 92 [0092.608] GetTextExtentPoint32W (in: hdc=0x490108ba, lpString="0", c=1, psizl=0x2ec1b1c | out: psizl=0x2ec1b1c) returned 1 [0092.608] DeleteObject (ho=0x660a08c7) returned 1 [0092.608] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.608] AdjustWindowRectEx (in: lpRect=0x119e734, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e734) returned 1 [0092.608] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.608] AdjustWindowRectEx (in: lpRect=0x119e600, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e600) returned 1 [0092.608] GdipGetFamilyName (in: family=0x55f5350, name=0x119e5cc, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0092.608] GetDeviceCaps (hdc=0x490108ba, index=90) returned 96 [0092.608] CoTaskMemAlloc (cb=0x5c) returned 0x15ec3e8 [0092.608] CreateFontIndirectW (lplf=0x15ec3e8) returned 0x670a08c7 [0092.608] CoTaskMemFree (pv=0x15ec3e8) [0092.608] GetObjectW (in: h=0x670a08c7, c=92, pv=0x119e594 | out: pv=0x119e594) returned 92 [0092.608] GetTextExtentPoint32W (in: hdc=0x490108ba, lpString="0", c=1, psizl=0x2ec1d78 | out: psizl=0x2ec1d78) returned 1 [0092.608] DeleteObject (ho=0x670a08c7) returned 1 [0092.610] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.610] AdjustWindowRectEx (in: lpRect=0x119e5f0, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e5f0) returned 1 [0092.611] DrawTextExW (in: hdc=0x490108ba, lpchText="https://www.youtube.com/watch?v=Ji9IwPId5Uk", cchText=43, lprc=0x119e5dc, format=0x2400, lpdtp=0x2ec250c | out: lpchText="https://www.youtube.com/watch?v=Ji9IwPId5Uk", lprc=0x119e5dc) returned 13 [0092.611] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.611] AdjustWindowRectEx (in: lpRect=0x119e6a4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e6a4) returned 1 [0092.611] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.611] AdjustWindowRectEx (in: lpRect=0x119e754, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e754) returned 1 [0092.611] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.611] AdjustWindowRectEx (in: lpRect=0x119e754, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e754) returned 1 [0092.612] GetCurrentThreadId () returned 0x9e4 [0092.612] GetCurrentThreadId () returned 0x9e4 [0092.613] GetCurrentThreadId () returned 0x9e4 [0092.613] GetCurrentThreadId () returned 0x9e4 [0092.613] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.613] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e780) returned 1 [0092.613] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.613] AdjustWindowRectEx (in: lpRect=0x119e780, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e780) returned 1 [0092.613] GetDC (hWnd=0x0) returned 0xe010919 [0092.613] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e6c0) returned 0x0 [0092.613] GdipGetFontHeight (font=0x54def18, graphics=0x56086d8, height=0x119e6b8) returned 0x0 [0092.613] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.613] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.614] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.614] AdjustWindowRectEx (in: lpRect=0x119e634, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e634) returned 1 [0092.614] GdipGetFamilyName (in: family=0x55f5350, name=0x119e600, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0092.614] GetDeviceCaps (hdc=0x490108ba, index=90) returned 96 [0092.614] CoTaskMemAlloc (cb=0x5c) returned 0x15ec7f8 [0092.614] CreateFontIndirectW (lplf=0x15ec7f8) returned 0x680a08c7 [0092.614] CoTaskMemFree (pv=0x15ec7f8) [0092.614] GetObjectW (in: h=0x680a08c7, c=92, pv=0x119e5c8 | out: pv=0x119e5c8) returned 92 [0092.614] GetTextExtentPoint32W (in: hdc=0x490108ba, lpString="0", c=1, psizl=0x2ec2c24 | out: psizl=0x2ec2c24) returned 1 [0092.614] DeleteObject (ho=0x680a08c7) returned 1 [0092.614] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.614] AdjustWindowRectEx (in: lpRect=0x119e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e708) returned 1 [0092.614] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.614] AdjustWindowRectEx (in: lpRect=0x119e620, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e620) returned 1 [0092.614] GdipGetFamilyName (in: family=0x55f5350, name=0x119e5ec, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0092.614] GetDeviceCaps (hdc=0x490108ba, index=90) returned 96 [0092.614] CoTaskMemAlloc (cb=0x5c) returned 0x15ec8c8 [0092.614] CreateFontIndirectW (lplf=0x15ec8c8) returned 0x690a08c7 [0092.614] CoTaskMemFree (pv=0x15ec8c8) [0092.614] GetObjectW (in: h=0x690a08c7, c=92, pv=0x119e5b4 | out: pv=0x119e5b4) returned 92 [0092.614] GetTextExtentPoint32W (in: hdc=0x490108ba, lpString="0", c=1, psizl=0x2ec2ef4 | out: psizl=0x2ec2ef4) returned 1 [0092.614] DeleteObject (ho=0x690a08c7) returned 1 [0092.615] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.615] AdjustWindowRectEx (in: lpRect=0x119e754, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e754) returned 1 [0092.615] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.615] AdjustWindowRectEx (in: lpRect=0x119e620, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e620) returned 1 [0092.615] GdipGetFamilyName (in: family=0x55f5350, name=0x119e5ec, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0092.615] GetDeviceCaps (hdc=0x490108ba, index=90) returned 96 [0092.615] CoTaskMemAlloc (cb=0x5c) returned 0x15ec728 [0092.615] CreateFontIndirectW (lplf=0x15ec728) returned 0x6a0a08c7 [0092.615] CoTaskMemFree (pv=0x15ec728) [0092.615] GetObjectW (in: h=0x6a0a08c7, c=92, pv=0x119e5b4 | out: pv=0x119e5b4) returned 92 [0092.615] GetTextExtentPoint32W (in: hdc=0x490108ba, lpString="0", c=1, psizl=0x2ec3140 | out: psizl=0x2ec3140) returned 1 [0092.615] DeleteObject (ho=0x6a0a08c7) returned 1 [0092.615] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.615] AdjustWindowRectEx (in: lpRect=0x119e5fc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e5fc) returned 1 [0092.615] DrawTextExW (in: hdc=0x490108ba, lpchText="Enter the key:", cchText=14, lprc=0x119e5e8, format=0x2400, lpdtp=0x2ec31cc | out: lpchText="Enter the key:", lprc=0x119e5e8) returned 13 [0092.615] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.615] AdjustWindowRectEx (in: lpRect=0x119e6d0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e6d0) returned 1 [0092.615] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x119e7d0) returned 0x0 [0092.616] GdipCreateFont (fontFamily=0x55f5350, emSize=0x41040000, style=2, unit=0x3, font=0x2ec3238) returned 0x0 [0092.616] GdipGetFontSize (font=0x54def40, size=0x2ec323c) returned 0x0 [0092.616] GetDC (hWnd=0x0) returned 0xe010919 [0092.616] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e790) returned 0x0 [0092.616] GdipGetFontHeight (font=0x54def40, graphics=0x56086d8, height=0x119e788) returned 0x0 [0092.616] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.616] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.616] GetDC (hWnd=0x0) returned 0xe010919 [0092.616] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e728) returned 0x0 [0092.616] GdipGetFontHeight (font=0x54def40, graphics=0x56086d8, height=0x119e720) returned 0x0 [0092.616] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.616] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.616] GetSystemMetrics (nIndex=5) returned 1 [0092.616] GetSystemMetrics (nIndex=6) returned 1 [0092.616] GetSystemMetrics (nIndex=5) returned 1 [0092.616] GetSystemMetrics (nIndex=6) returned 1 [0092.616] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.616] AdjustWindowRectEx (in: lpRect=0x119e758, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e758) returned 1 [0092.616] GetSystemMetrics (nIndex=5) returned 1 [0092.616] GetSystemMetrics (nIndex=6) returned 1 [0092.616] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.616] AdjustWindowRectEx (in: lpRect=0x119e758, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e758) returned 1 [0092.618] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.618] AdjustWindowRectEx (in: lpRect=0x119e758, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e758) returned 1 [0092.618] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.618] AdjustWindowRectEx (in: lpRect=0x119e758, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e758) returned 1 [0092.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe.config", nBufferLength=0x105, lpBuffer=0x119e09c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe.config", lpFilePart=0x0) returned 0x32 [0092.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119e550) returned 1 [0092.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe.config" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x119e5cc | out: lpFileInformation=0x119e5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119e54c) returned 1 [0092.883] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.883] AdjustWindowRectEx (in: lpRect=0x119e7b4, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x119e7b4) returned 1 [0092.883] GetSystemMetrics (nIndex=59) returned 1456 [0092.883] GetSystemMetrics (nIndex=60) returned 916 [0092.883] GetSystemMetrics (nIndex=34) returned 140 [0092.883] GetSystemMetrics (nIndex=35) returned 39 [0092.883] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.883] AdjustWindowRectEx (in: lpRect=0x119e6b4, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x119e6b4) returned 1 [0092.884] GetCurrentThreadId () returned 0x9e4 [0092.884] GetCurrentThreadId () returned 0x9e4 [0092.884] GetCurrentThreadId () returned 0x9e4 [0092.884] GetCurrentThreadId () returned 0x9e4 [0092.884] GetCurrentThreadId () returned 0x9e4 [0092.884] GetCurrentThreadId () returned 0x9e4 [0092.884] GetCurrentThreadId () returned 0x9e4 [0092.884] GetCurrentThreadId () returned 0x9e4 [0092.884] GetCurrentThreadId () returned 0x9e4 [0092.884] GetCurrentThreadId () returned 0x9e4 [0092.884] GetCurrentThreadId () returned 0x9e4 [0092.884] GetCurrentThreadId () returned 0x9e4 [0092.884] GetCurrentThreadId () returned 0x9e4 [0092.884] GetCurrentThreadId () returned 0x9e4 [0092.884] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.884] AdjustWindowRectEx (in: lpRect=0x119e6b4, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x119e6b4) returned 1 [0092.884] AdjustWindowRectEx (in: lpRect=0x119e78c, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x119e78c) returned 1 [0092.884] GetSystemMetrics (nIndex=59) returned 1456 [0092.884] GetSystemMetrics (nIndex=60) returned 916 [0092.884] GetSystemMetrics (nIndex=34) returned 140 [0092.884] GetSystemMetrics (nIndex=35) returned 39 [0092.884] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.884] AdjustWindowRectEx (in: lpRect=0x119e5c0, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x119e5c0) returned 1 [0092.884] AdjustWindowRectEx (in: lpRect=0x119e68c, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x119e68c) returned 1 [0092.885] CreateCompatibleDC (hdc=0x0) returned 0x140108e2 [0092.885] GetDC (hWnd=0x0) returned 0xe010919 [0092.885] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e608) returned 0x0 [0092.885] CoTaskMemAlloc (cb=0x5c) returned 0x15ec728 [0092.885] GdipGetLogFontW (font=0x54def18, graphics=0x56086d8, logfontW=0x15ec728) returned 0x0 [0092.886] CoTaskMemFree (pv=0x15ec728) [0092.886] CoTaskMemAlloc (cb=0x5c) returned 0x15ec8c8 [0092.886] CoTaskMemFree (pv=0x15ec8c8) [0092.886] CoTaskMemAlloc (cb=0x5c) returned 0x15ec728 [0092.886] CoTaskMemFree (pv=0x15ec728) [0092.886] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.886] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.886] CoTaskMemAlloc (cb=0x5c) returned 0x15ecad0 [0092.886] CreateFontIndirectW (lplf=0x15ecad0) returned 0xc0a08e3 [0092.886] CoTaskMemFree (pv=0x15ecad0) [0092.886] SelectObject (hdc=0x140108e2, h=0xc0a08e3) returned 0x18a0048 [0092.887] GetTextMetricsW (in: hdc=0x140108e2, lptm=0x119e718 | out: lptm=0x119e718) returned 1 [0092.887] GetTextExtentPoint32W (in: hdc=0x140108e2, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x2ec6538 | out: psizl=0x2ec6538) returned 1 [0092.887] SelectObject (hdc=0x140108e2, h=0x18a0048) returned 0xc0a08e3 [0092.887] DeleteDC (hdc=0x140108e2) returned 1 [0092.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.889] AdjustWindowRectEx (in: lpRect=0x119e718, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e718) returned 1 [0092.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.889] AdjustWindowRectEx (in: lpRect=0x119e568, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e568) returned 1 [0092.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.889] AdjustWindowRectEx (in: lpRect=0x119e524, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e524) returned 1 [0092.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.889] AdjustWindowRectEx (in: lpRect=0x119e6c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e6c4) returned 1 [0092.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.889] AdjustWindowRectEx (in: lpRect=0x119e514, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e514) returned 1 [0092.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.889] AdjustWindowRectEx (in: lpRect=0x119e4a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e4a4) returned 1 [0092.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.890] AdjustWindowRectEx (in: lpRect=0x119e6c4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e6c4) returned 1 [0092.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.890] AdjustWindowRectEx (in: lpRect=0x119e514, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e514) returned 1 [0092.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.890] AdjustWindowRectEx (in: lpRect=0x119e4d0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e4d0) returned 1 [0092.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.890] AdjustWindowRectEx (in: lpRect=0x119e718, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e718) returned 1 [0092.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.890] AdjustWindowRectEx (in: lpRect=0x119e568, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e568) returned 1 [0092.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.890] AdjustWindowRectEx (in: lpRect=0x119e524, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e524) returned 1 [0092.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.890] AdjustWindowRectEx (in: lpRect=0x119e6c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e6c4) returned 1 [0092.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.890] AdjustWindowRectEx (in: lpRect=0x119e514, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e514) returned 1 [0092.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.891] AdjustWindowRectEx (in: lpRect=0x119e370, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e370) returned 1 [0092.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.891] AdjustWindowRectEx (in: lpRect=0x119e4a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e4a4) returned 1 [0092.891] GetDC (hWnd=0x0) returned 0xe010919 [0092.891] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e37c) returned 0x0 [0092.891] GdipGetFontHeight (font=0x54def18, graphics=0x56086d8, height=0x119e374) returned 0x0 [0092.891] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.891] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.891] AdjustWindowRectEx (in: lpRect=0x119e6c4, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e6c4) returned 1 [0092.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.891] AdjustWindowRectEx (in: lpRect=0x119e514, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e514) returned 1 [0092.891] GetSystemMetrics (nIndex=5) returned 1 [0092.891] GetSystemMetrics (nIndex=6) returned 1 [0092.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.891] AdjustWindowRectEx (in: lpRect=0x119e4a8, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e4a8) returned 1 [0092.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.892] AdjustWindowRectEx (in: lpRect=0x119e718, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e718) returned 1 [0092.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.892] AdjustWindowRectEx (in: lpRect=0x119e568, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e568) returned 1 [0092.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.892] AdjustWindowRectEx (in: lpRect=0x119e524, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e524) returned 1 [0092.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.892] AdjustWindowRectEx (in: lpRect=0x119e6c4, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e6c4) returned 1 [0092.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.892] AdjustWindowRectEx (in: lpRect=0x119e514, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e514) returned 1 [0092.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.892] AdjustWindowRectEx (in: lpRect=0x119e4a8, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e4a8) returned 1 [0092.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.892] AdjustWindowRectEx (in: lpRect=0x119e718, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e718) returned 1 [0092.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.893] AdjustWindowRectEx (in: lpRect=0x119e568, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e568) returned 1 [0092.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.893] AdjustWindowRectEx (in: lpRect=0x119e524, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e524) returned 1 [0092.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.893] AdjustWindowRectEx (in: lpRect=0x119e6c4, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e6c4) returned 1 [0092.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.893] AdjustWindowRectEx (in: lpRect=0x119e514, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e514) returned 1 [0092.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.893] AdjustWindowRectEx (in: lpRect=0x119e4d0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e4d0) returned 1 [0092.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.893] AdjustWindowRectEx (in: lpRect=0x119e6c4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e6c4) returned 1 [0092.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.893] AdjustWindowRectEx (in: lpRect=0x119e514, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e514) returned 1 [0092.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.893] AdjustWindowRectEx (in: lpRect=0x119e350, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e350) returned 1 [0092.894] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.894] AdjustWindowRectEx (in: lpRect=0x119e484, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e484) returned 1 [0092.894] GetDC (hWnd=0x0) returned 0xe010919 [0092.894] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e35c) returned 0x0 [0092.894] GdipGetFontHeight (font=0x54def18, graphics=0x56086d8, height=0x119e354) returned 0x0 [0092.894] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.894] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.894] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.894] AdjustWindowRectEx (in: lpRect=0x119e6c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e6c4) returned 1 [0092.894] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.894] AdjustWindowRectEx (in: lpRect=0x119e514, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e514) returned 1 [0092.894] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.894] AdjustWindowRectEx (in: lpRect=0x119e4a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e4a4) returned 1 [0092.894] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.894] AdjustWindowRectEx (in: lpRect=0x119e718, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e718) returned 1 [0092.894] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.894] AdjustWindowRectEx (in: lpRect=0x119e568, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e568) returned 1 [0092.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.895] AdjustWindowRectEx (in: lpRect=0x119e524, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x119e524) returned 1 [0092.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.895] AdjustWindowRectEx (in: lpRect=0x119e6c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e6c4) returned 1 [0092.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.895] AdjustWindowRectEx (in: lpRect=0x119e514, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e514) returned 1 [0092.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.895] AdjustWindowRectEx (in: lpRect=0x119e370, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e370) returned 1 [0092.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.895] AdjustWindowRectEx (in: lpRect=0x119e4a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e4a4) returned 1 [0092.895] GetDC (hWnd=0x0) returned 0xe010919 [0092.895] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e37c) returned 0x0 [0092.895] GdipGetFontHeight (font=0x54def18, graphics=0x56086d8, height=0x119e374) returned 0x0 [0092.895] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.895] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.895] AdjustWindowRectEx (in: lpRect=0x119e6c4, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e6c4) returned 1 [0092.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.895] AdjustWindowRectEx (in: lpRect=0x119e514, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e514) returned 1 [0092.895] GetSystemMetrics (nIndex=5) returned 1 [0092.896] GetSystemMetrics (nIndex=6) returned 1 [0092.896] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.896] AdjustWindowRectEx (in: lpRect=0x119e4a8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x119e4a8) returned 1 [0092.896] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.896] AdjustWindowRectEx (in: lpRect=0x119e450, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x119e450) returned 1 [0092.896] AdjustWindowRectEx (in: lpRect=0x119e68c, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x119e68c) returned 1 [0092.896] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.896] AdjustWindowRectEx (in: lpRect=0x119e3c0, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x119e3c0) returned 1 [0092.896] AdjustWindowRectEx (in: lpRect=0x119e4b0, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x119e4b0) returned 1 [0092.896] GetSystemMetrics (nIndex=59) returned 1456 [0092.896] GetSystemMetrics (nIndex=60) returned 916 [0092.896] GetSystemMetrics (nIndex=34) returned 140 [0092.896] GetSystemMetrics (nIndex=35) returned 39 [0092.896] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.896] AdjustWindowRectEx (in: lpRect=0x119e358, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x119e358) returned 1 [0092.896] AdjustWindowRectEx (in: lpRect=0x119e424, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x119e424) returned 1 [0092.896] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.896] AdjustWindowRectEx (in: lpRect=0x119e684, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e684) returned 1 [0092.897] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.897] AdjustWindowRectEx (in: lpRect=0x119e4d4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e4d4) returned 1 [0092.897] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.897] AdjustWindowRectEx (in: lpRect=0x119e490, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e490) returned 1 [0092.897] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.897] AdjustWindowRectEx (in: lpRect=0x119e684, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e684) returned 1 [0092.897] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.897] AdjustWindowRectEx (in: lpRect=0x119e4d4, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e4d4) returned 1 [0092.897] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.897] AdjustWindowRectEx (in: lpRect=0x119e490, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119e490) returned 1 [0092.898] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.898] AdjustWindowRectEx (in: lpRect=0x119f028, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x119f028) returned 1 [0092.898] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.898] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName="#Lime Decryptor", dwStyle=0x2c80000, X=-2147483648, Y=-2147483648, nWidth=754, nHeight=480, hWndParent=0x0, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x30258 [0092.898] SetWindowLongW (hWnd=0x30258, nIndex=-4, dwNewLong=1949416938) returned 89327078 [0092.898] GetWindowLongW (hWnd=0x30258, nIndex=-4) returned 1949416938 [0092.898] SetWindowLongW (hWnd=0x30258, nIndex=-4, dwNewLong=89327238) returned 1949416938 [0092.898] GetWindowLongW (hWnd=0x30258, nIndex=-4) returned 89327238 [0092.898] GetWindowLongW (hWnd=0x30258, nIndex=-16) returned 113770496 [0092.898] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x81, wParam=0x0, lParam=0x119eb08) returned 0x1 [0092.899] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x83, wParam=0x0, lParam=0x119eaf4) returned 0x0 [0092.899] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x1, wParam=0x0, lParam=0x119eb08) returned 0x0 [0092.899] GetClientRect (in: hWnd=0x30258, lpRect=0x119e81c | out: lpRect=0x119e81c) returned 1 [0092.899] GetWindowRect (in: hWnd=0x30258, lpRect=0x119e81c | out: lpRect=0x119e81c) returned 1 [0092.899] SetWindowTextW (hWnd=0x30258, lpString="#Lime Decryptor") returned 1 [0092.899] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xc, wParam=0x0, lParam=0x2eba480) returned 0x1 [0092.900] GetStartupInfoW (in: lpStartupInfo=0x2ec7c00 | out: lpStartupInfo=0x2ec7c00*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0092.900] GetParent (hWnd=0x30258) returned 0x0 [0092.900] SetWindowLongW (hWnd=0x30258, nIndex=-8, dwNewLong=0) returned 0 [0092.900] SendMessageW (hWnd=0x30258, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0092.901] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0092.901] SendMessageW (hWnd=0x30258, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0092.901] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0092.901] GetSystemMenu (hWnd=0x30258, bRevert=0) returned 0x202c3 [0092.906] GetWindowPlacement (in: hWnd=0x30258, lpwndpl=0x119f0dc | out: lpwndpl=0x119f0dc) returned 1 [0092.906] EnableMenuItem (hMenu=0x202c3, uIDEnableItem=0xf020, uEnable=0x1) returned 0 [0092.906] EnableMenuItem (hMenu=0x202c3, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0092.906] EnableMenuItem (hMenu=0x202c3, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0092.906] EnableMenuItem (hMenu=0x202c3, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0092.906] EnableMenuItem (hMenu=0x202c3, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0092.906] GetClientRect (in: hWnd=0x30258, lpRect=0x119f120 | out: lpRect=0x119f120) returned 1 [0092.906] GetClientRect (in: hWnd=0x30258, lpRect=0x119f080 | out: lpRect=0x119f080) returned 1 [0092.906] GetWindowRect (in: hWnd=0x30258, lpRect=0x119f080 | out: lpRect=0x119f080) returned 1 [0092.906] SetWindowPos (hWnd=0x30258, hWndInsertAfter=0xffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0092.906] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x46, wParam=0x0, lParam=0x119f09c) returned 0x0 [0092.908] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x46, wParam=0x0, lParam=0x119f09c) returned 0x0 [0092.908] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x1c, wParam=0x1, lParam=0xfc) returned 0x0 [0092.908] NtdllDefWindowProc_W (hWnd=0x30254, Msg=0x1c, wParam=0x1, lParam=0xfc) returned 0x0 [0092.908] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0092.909] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0092.909] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0092.909] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0092.909] OleInitialize (pvReserved=0x0) returned 0x0 [0092.909] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x119ee44 | out: lplpMessageFilter=0x119ee44*=0x0) returned 0x0 [0092.912] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0092.914] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0092.914] GetParent (hWnd=0x30258) returned 0x0 [0092.914] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0092.914] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0092.914] GetWindowPlacement (in: hWnd=0x30258, lpwndpl=0x119ee30 | out: lpwndpl=0x119ee30) returned 1 [0092.914] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x47, wParam=0x0, lParam=0x119f09c) returned 0x0 [0092.914] GetClientRect (in: hWnd=0x30258, lpRect=0x119ede0 | out: lpRect=0x119ede0) returned 1 [0092.914] GetWindowRect (in: hWnd=0x30258, lpRect=0x119ede0 | out: lpRect=0x119ede0) returned 1 [0092.915] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0092.915] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0092.915] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0092.915] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.915] GetWindowLongW (hWnd=0x30258, nIndex=-16) returned 113770496 [0092.915] GetWindowTextLengthW (hWnd=0x30258) returned 15 [0092.915] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0092.915] GetSystemMetrics (nIndex=42) returned 0 [0092.915] GetWindowTextW (in: hWnd=0x30258, lpString=0x119f010, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0092.915] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xd, wParam=0x10, lParam=0x119f010) returned 0xf [0092.915] GetWindowTextLengthW (hWnd=0x30258) returned 15 [0092.916] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0092.916] GetSystemMetrics (nIndex=42) returned 0 [0092.916] GetWindowTextW (in: hWnd=0x30258, lpString=0x119f010, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0092.916] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xd, wParam=0x10, lParam=0x119f010) returned 0xf [0092.916] GetWindowLongW (hWnd=0x30258, nIndex=-16) returned 113770496 [0092.916] GetWindowLongW (hWnd=0x30258, nIndex=-20) returned 327945 [0092.916] SetWindowLongW (hWnd=0x30258, nIndex=-16, dwNewLong=46661632) returned 113770496 [0092.916] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7c, wParam=0xfffffff0, lParam=0x119f084) returned 0x0 [0092.916] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7d, wParam=0xfffffff0, lParam=0x119f084) returned 0x0 [0092.916] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0092.916] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0092.916] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0092.916] SetWindowLongW (hWnd=0x30258, nIndex=-20, dwNewLong=327681) returned 327945 [0092.916] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7c, wParam=0xffffffec, lParam=0x119f084) returned 0x0 [0092.916] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7d, wParam=0xffffffec, lParam=0x119f084) returned 0x0 [0092.916] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0092.916] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0092.916] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0092.917] SetWindowPos (hWnd=0x30258, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0092.917] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x46, wParam=0x0, lParam=0x119f098) returned 0x0 [0092.917] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x83, wParam=0x1, lParam=0x119f070) returned 0x0 [0092.917] GetWindowPlacement (in: hWnd=0x30258, lpwndpl=0x119ee2c | out: lpwndpl=0x119ee2c) returned 1 [0092.917] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x47, wParam=0x0, lParam=0x119f098) returned 0x0 [0092.917] GetClientRect (in: hWnd=0x30258, lpRect=0x119eddc | out: lpRect=0x119eddc) returned 1 [0092.917] GetWindowRect (in: hWnd=0x30258, lpRect=0x119eddc | out: lpRect=0x119eddc) returned 1 [0092.917] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0092.917] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0092.917] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0092.917] RedrawWindow (hWnd=0x30258, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0092.917] GetSystemMenu (hWnd=0x30258, bRevert=0) returned 0x202c3 [0092.918] GetWindowPlacement (in: hWnd=0x30258, lpwndpl=0x119f0cc | out: lpwndpl=0x119f0cc) returned 1 [0092.918] EnableMenuItem (hMenu=0x202c3, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0092.918] EnableMenuItem (hMenu=0x202c3, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0092.918] EnableMenuItem (hMenu=0x202c3, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0092.918] EnableMenuItem (hMenu=0x202c3, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0092.918] EnableMenuItem (hMenu=0x202c3, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0092.918] ShowWindow (hWnd=0x30258, nCmdShow=5) returned 0 [0092.918] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0092.918] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.918] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.918] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName="Decrypt", dwStyle=0x56000000, X=14, Y=285, nWidth=711, nHeight=60, hWndParent=0x30258, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x202a8 [0092.918] SetWindowLongW (hWnd=0x202a8, nIndex=-4, dwNewLong=1949416938) returned 89327078 [0092.918] GetWindowLongW (hWnd=0x202a8, nIndex=-4) returned 1949416938 [0092.918] SetWindowLongW (hWnd=0x202a8, nIndex=-4, dwNewLong=89327278) returned 1949416938 [0092.918] GetWindowLongW (hWnd=0x202a8, nIndex=-4) returned 89327278 [0092.918] GetWindowLongW (hWnd=0x202a8, nIndex=-16) returned 1174405120 [0092.918] GetWindowLongW (hWnd=0x202a8, nIndex=-12) returned 0 [0092.918] SetWindowLongW (hWnd=0x202a8, nIndex=-12, dwNewLong=131752) returned 0 [0092.919] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x81, wParam=0x0, lParam=0x119e7b0) returned 0x1 [0092.919] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x83, wParam=0x0, lParam=0x119e79c) returned 0x0 [0092.919] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x1, wParam=0x0, lParam=0x119e7b0) returned 0x0 [0092.919] GetWindow (hWnd=0x202a8, uCmd=0x3) returned 0x0 [0092.919] GetClientRect (in: hWnd=0x202a8, lpRect=0x119e4f0 | out: lpRect=0x119e4f0) returned 1 [0092.919] GetWindowRect (in: hWnd=0x202a8, lpRect=0x119e4f0 | out: lpRect=0x119e4f0) returned 1 [0092.919] GetParent (hWnd=0x202a8) returned 0x30258 [0092.919] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e4f0, cPoints=0x2 | out: lpPoints=0x119e4f0) returned -8454251 [0092.919] SetWindowTextW (hWnd=0x202a8, lpString="Decrypt") returned 1 [0092.919] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xc, wParam=0x0, lParam=0x2eb9e68) returned 0x1 [0092.920] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x5, wParam=0x0, lParam=0x3c02c7) returned 0x0 [0092.920] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x3, wParam=0x0, lParam=0x11d000e) returned 0x0 [0092.920] GetClientRect (in: hWnd=0x202a8, lpRect=0x119e54c | out: lpRect=0x119e54c) returned 1 [0092.920] GetWindowRect (in: hWnd=0x202a8, lpRect=0x119e54c | out: lpRect=0x119e54c) returned 1 [0092.920] GetParent (hWnd=0x202a8) returned 0x30258 [0092.920] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e54c, cPoints=0x2 | out: lpPoints=0x119e54c) returned -8454251 [0092.920] SendMessageW (hWnd=0x202a8, Msg=0x2210, wParam=0x2a80001, lParam=0x202a8) returned 0x0 [0092.920] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x2210, wParam=0x2a80001, lParam=0x202a8) returned 0x0 [0092.920] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0092.920] GetParent (hWnd=0x202a8) returned 0x30258 [0092.920] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.920] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x2ec81e0 | out: lpWndClass=0x2ec81e0) returned 1 [0092.921] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.921] CoTaskMemAlloc (cb=0x58) returned 0x160b650 [0092.921] RegisterClassW (lpWndClass=0x119ebf4) returned 0xc1c0 [0092.921] CoTaskMemFree (pv=0x160b650) [0092.921] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.921] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.2bf8098_r11_ad1", lpWindowName="Enter the key:", dwStyle=0x5600000d, X=6, Y=14, nWidth=73, nHeight=13, hWndParent=0x202a8, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102b6 [0092.921] SetWindowLongW (hWnd=0x102b6, nIndex=-4, dwNewLong=2002237664) returned 89327318 [0092.921] GetWindowLongW (hWnd=0x102b6, nIndex=-4) returned 2002237664 [0092.922] SetWindowLongW (hWnd=0x102b6, nIndex=-4, dwNewLong=89327358) returned 2002237664 [0092.922] GetWindowLongW (hWnd=0x102b6, nIndex=-4) returned 89327358 [0092.922] GetWindowLongW (hWnd=0x102b6, nIndex=-16) returned 1174405133 [0092.922] GetWindowLongW (hWnd=0x102b6, nIndex=-12) returned 0 [0092.922] SetWindowLongW (hWnd=0x102b6, nIndex=-12, dwNewLong=66230) returned 0 [0092.922] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0x81, wParam=0x0, lParam=0x119e778) returned 0x1 [0092.922] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0x83, wParam=0x0, lParam=0x119e764) returned 0x0 [0092.922] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0x1, wParam=0x0, lParam=0x119e778) returned 0x0 [0092.922] GetWindow (hWnd=0x102b6, uCmd=0x3) returned 0x0 [0092.922] GetClientRect (in: hWnd=0x102b6, lpRect=0x119e488 | out: lpRect=0x119e488) returned 1 [0092.922] GetWindowRect (in: hWnd=0x102b6, lpRect=0x119e488 | out: lpRect=0x119e488) returned 1 [0092.922] GetParent (hWnd=0x102b6) returned 0x202a8 [0092.922] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202a8, lpPoints=0x119e488, cPoints=0x2 | out: lpPoints=0x119e488) returned -27132025 [0092.922] SetWindowTextW (hWnd=0x102b6, lpString="Enter the key:") returned 1 [0092.922] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0xc, wParam=0x0, lParam=0x2eba3ac) returned 0x1 [0092.922] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0x5, wParam=0x0, lParam=0xd0049) returned 0x0 [0092.922] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0x3, wParam=0x0, lParam=0xe0006) returned 0x0 [0092.923] GetClientRect (in: hWnd=0x102b6, lpRect=0x119e4e4 | out: lpRect=0x119e4e4) returned 1 [0092.923] GetWindowRect (in: hWnd=0x102b6, lpRect=0x119e4e4 | out: lpRect=0x119e4e4) returned 1 [0092.923] GetParent (hWnd=0x102b6) returned 0x202a8 [0092.923] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202a8, lpPoints=0x119e4e4, cPoints=0x2 | out: lpPoints=0x119e4e4) returned -27132025 [0092.923] SendMessageW (hWnd=0x102b6, Msg=0x2210, wParam=0x2b60001, lParam=0x102b6) returned 0x0 [0092.923] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0x2210, wParam=0x2b60001, lParam=0x102b6) returned 0x0 [0092.923] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0092.923] GetParent (hWnd=0x102b6) returned 0x202a8 [0092.923] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.923] GetClassInfoW (in: hInstance=0x0, lpClassName="EDIT", lpWndClass=0x2ec84f0 | out: lpWndClass=0x2ec84f0) returned 1 [0092.923] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.923] CoTaskMemAlloc (cb=0x54) returned 0x160b890 [0092.923] RegisterClassW (lpWndClass=0x119ebd4) returned 0xc1c6 [0092.923] CoTaskMemFree (pv=0x160b890) [0092.924] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.924] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.2bf8098_r11_ad1", lpWindowName="Key", dwStyle=0x560100c0, X=6, Y=32, nWidth=699, nHeight=20, hWndParent=0x202a8, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102b8 [0092.924] SetWindowLongW (hWnd=0x102b8, nIndex=-4, dwNewLong=2002237568) returned 89327398 [0092.924] GetWindowLongW (hWnd=0x102b8, nIndex=-4) returned 2002237568 [0092.924] SetWindowLongW (hWnd=0x102b8, nIndex=-4, dwNewLong=89327438) returned 2002237568 [0092.924] GetWindowLongW (hWnd=0x102b8, nIndex=-4) returned 89327438 [0092.924] GetWindowLongW (hWnd=0x102b8, nIndex=-16) returned 1174470848 [0092.924] GetWindowLongW (hWnd=0x102b8, nIndex=-12) returned 0 [0092.924] SetWindowLongW (hWnd=0x102b8, nIndex=-12, dwNewLong=66232) returned 0 [0092.924] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x81, wParam=0x0, lParam=0x119e758) returned 0x1 [0092.925] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x83, wParam=0x0, lParam=0x119e744) returned 0x0 [0092.925] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x1, wParam=0x0, lParam=0x119e758) returned 0x1 [0092.926] SendMessageW (hWnd=0x102b8, Msg=0x2111, wParam=0x40002b8, lParam=0x102b8) returned 0x0 [0092.926] SendMessageW (hWnd=0x102b8, Msg=0x2111, wParam=0x30002b8, lParam=0x102b8) returned 0x0 [0092.926] GetWindow (hWnd=0x102b8, uCmd=0x3) returned 0x102b6 [0092.926] GetClientRect (in: hWnd=0x102b8, lpRect=0x119e47c | out: lpRect=0x119e47c) returned 1 [0092.926] GetWindowRect (in: hWnd=0x102b8, lpRect=0x119e47c | out: lpRect=0x119e47c) returned 1 [0092.926] GetParent (hWnd=0x102b8) returned 0x202a8 [0092.926] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202a8, lpPoints=0x119e47c, cPoints=0x2 | out: lpPoints=0x119e47c) returned -27132025 [0092.926] GetDC (hWnd=0x0) returned 0xe010919 [0092.926] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119e324) returned 0x0 [0092.926] CoTaskMemAlloc (cb=0x5c) returned 0x15ec7f8 [0092.926] GdipGetLogFontW (font=0x54def40, graphics=0x56086d8, logfontW=0x15ec7f8) returned 0x0 [0092.927] CoTaskMemFree (pv=0x15ec7f8) [0092.927] CoTaskMemAlloc (cb=0x5c) returned 0x15ec728 [0092.927] CoTaskMemFree (pv=0x15ec728) [0092.927] CoTaskMemAlloc (cb=0x5c) returned 0x15ec450 [0092.927] CoTaskMemFree (pv=0x15ec450) [0092.927] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0092.927] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0092.927] CoTaskMemAlloc (cb=0x5c) returned 0x15ec728 [0092.927] CreateFontIndirectW (lplf=0x15ec728) returned 0x1e0a08f8 [0092.927] CoTaskMemFree (pv=0x15ec728) [0092.927] SendMessageW (hWnd=0x102b8, Msg=0x30, wParam=0x1e0a08f8, lParam=0x0) returned 0x1 [0092.927] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x30, wParam=0x1e0a08f8, lParam=0x0) returned 0x1 [0092.928] SendMessageW (hWnd=0x102b8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0092.928] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0092.928] SetWindowTextW (hWnd=0x102b8, lpString="Key") returned 1 [0092.928] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xc, wParam=0x0, lParam=0x2eba3fc) returned 0x1 [0092.928] SendMessageW (hWnd=0x102b8, Msg=0x2111, wParam=0x40002b8, lParam=0x102b8) returned 0x0 [0092.928] SendMessageW (hWnd=0x102b8, Msg=0x2111, wParam=0x30002b8, lParam=0x102b8) returned 0x0 [0092.928] GetSystemMetrics (nIndex=5) returned 1 [0092.928] GetSystemMetrics (nIndex=6) returned 1 [0092.928] SendMessageW (hWnd=0x102b8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0092.928] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0092.928] SendMessageW (hWnd=0x102b8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0092.928] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0092.928] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x5, wParam=0x0, lParam=0x1002b7) returned 0x0 [0092.928] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x3, wParam=0x0, lParam=0x220008) returned 0x0 [0092.928] GetClientRect (in: hWnd=0x102b8, lpRect=0x119e4d8 | out: lpRect=0x119e4d8) returned 1 [0092.928] GetWindowRect (in: hWnd=0x102b8, lpRect=0x119e4d8 | out: lpRect=0x119e4d8) returned 1 [0092.928] GetParent (hWnd=0x102b8) returned 0x202a8 [0092.929] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202a8, lpPoints=0x119e4d8, cPoints=0x2 | out: lpPoints=0x119e4d8) returned -27132025 [0092.929] SendMessageW (hWnd=0x102b8, Msg=0x2210, wParam=0x2b80001, lParam=0x102b8) returned 0x0 [0092.929] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x2210, wParam=0x2b80001, lParam=0x102b8) returned 0x0 [0092.929] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0092.929] GetParent (hWnd=0x102b8) returned 0x202a8 [0092.929] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.929] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.929] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName="How to buy your file ?", dwStyle=0x56000000, X=383, Y=119, nWidth=340, nHeight=94, hWndParent=0x30258, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102ba [0092.929] SetWindowLongW (hWnd=0x102ba, nIndex=-4, dwNewLong=1949416938) returned 89327078 [0092.929] GetWindowLongW (hWnd=0x102ba, nIndex=-4) returned 1949416938 [0092.929] SetWindowLongW (hWnd=0x102ba, nIndex=-4, dwNewLong=89327478) returned 1949416938 [0092.929] GetWindowLongW (hWnd=0x102ba, nIndex=-4) returned 89327478 [0092.929] GetWindowLongW (hWnd=0x102ba, nIndex=-16) returned 1174405120 [0092.929] GetWindowLongW (hWnd=0x102ba, nIndex=-12) returned 0 [0092.929] SetWindowLongW (hWnd=0x102ba, nIndex=-12, dwNewLong=66234) returned 0 [0092.930] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x81, wParam=0x0, lParam=0x119e7b0) returned 0x1 [0092.930] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x83, wParam=0x0, lParam=0x119e79c) returned 0x0 [0092.930] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x1, wParam=0x0, lParam=0x119e7b0) returned 0x0 [0092.930] GetWindow (hWnd=0x102ba, uCmd=0x3) returned 0x202a8 [0092.930] GetClientRect (in: hWnd=0x102ba, lpRect=0x119e4f0 | out: lpRect=0x119e4f0) returned 1 [0092.930] GetWindowRect (in: hWnd=0x102ba, lpRect=0x119e4f0 | out: lpRect=0x119e4f0) returned 1 [0092.930] GetParent (hWnd=0x102ba) returned 0x30258 [0092.930] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e4f0, cPoints=0x2 | out: lpPoints=0x119e4f0) returned -8454251 [0092.930] SetWindowTextW (hWnd=0x102ba, lpString="How to buy your file ?") returned 1 [0092.930] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xc, wParam=0x0, lParam=0x2eba140) returned 0x1 [0092.930] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x5, wParam=0x0, lParam=0x5e0154) returned 0x0 [0092.930] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x3, wParam=0x0, lParam=0x77017f) returned 0x0 [0092.930] GetClientRect (in: hWnd=0x102ba, lpRect=0x119e54c | out: lpRect=0x119e54c) returned 1 [0092.930] GetWindowRect (in: hWnd=0x102ba, lpRect=0x119e54c | out: lpRect=0x119e54c) returned 1 [0092.930] GetParent (hWnd=0x102ba) returned 0x30258 [0092.930] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e54c, cPoints=0x2 | out: lpPoints=0x119e54c) returned -8454251 [0092.931] SendMessageW (hWnd=0x102ba, Msg=0x2210, wParam=0x2ba0001, lParam=0x102ba) returned 0x0 [0092.931] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x2210, wParam=0x2ba0001, lParam=0x102ba) returned 0x0 [0092.931] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0092.931] GetParent (hWnd=0x102ba) returned 0x30258 [0092.931] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.931] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x2ec8a94 | out: lpWndClass=0x2ec8a94) returned 1 [0092.931] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.931] CoTaskMemAlloc (cb=0x58) returned 0x160b410 [0092.931] RegisterClassW (lpWndClass=0x119ebf4) returned 0xc1c7 [0092.931] CoTaskMemFree (pv=0x160b410) [0092.931] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.931] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.2bf8098_r11_ad1", lpWindowName="?", dwStyle=0x5601000b, X=306, Y=14, nWidth=26, nHeight=21, hWndParent=0x102ba, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102bc [0092.932] SetWindowLongW (hWnd=0x102bc, nIndex=-4, dwNewLong=2002237440) returned 89327518 [0092.932] GetWindowLongW (hWnd=0x102bc, nIndex=-4) returned 2002237440 [0092.932] SetWindowLongW (hWnd=0x102bc, nIndex=-4, dwNewLong=89327558) returned 2002237440 [0092.932] GetWindowLongW (hWnd=0x102bc, nIndex=-4) returned 89327558 [0092.932] GetWindowLongW (hWnd=0x102bc, nIndex=-16) returned 1174470667 [0092.932] GetWindowLongW (hWnd=0x102bc, nIndex=-12) returned 0 [0092.932] SetWindowLongW (hWnd=0x102bc, nIndex=-12, dwNewLong=66236) returned 0 [0092.932] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x81, wParam=0x0, lParam=0x119e778) returned 0x1 [0092.933] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x83, wParam=0x0, lParam=0x119e764) returned 0x0 [0092.933] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x1, wParam=0x0, lParam=0x119e778) returned 0x0 [0092.933] GetWindow (hWnd=0x102bc, uCmd=0x3) returned 0x0 [0092.933] GetClientRect (in: hWnd=0x102bc, lpRect=0x119e47c | out: lpRect=0x119e47c) returned 1 [0092.933] GetWindowRect (in: hWnd=0x102bc, lpRect=0x119e47c | out: lpRect=0x119e47c) returned 1 [0092.933] GetParent (hWnd=0x102bc) returned 0x102ba [0092.933] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102ba, lpPoints=0x119e47c, cPoints=0x2 | out: lpPoints=0x119e47c) returned -16253418 [0092.933] SetWindowTextW (hWnd=0x102bc, lpString="?") returned 1 [0092.933] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0xc, wParam=0x0, lParam=0x2eba1a0) returned 0x1 [0092.933] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x5, wParam=0x0, lParam=0x15001a) returned 0x0 [0092.933] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x3, wParam=0x0, lParam=0xe0132) returned 0x0 [0092.933] GetClientRect (in: hWnd=0x102bc, lpRect=0x119e4d8 | out: lpRect=0x119e4d8) returned 1 [0092.933] GetWindowRect (in: hWnd=0x102bc, lpRect=0x119e4d8 | out: lpRect=0x119e4d8) returned 1 [0092.933] GetParent (hWnd=0x102bc) returned 0x102ba [0092.933] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102ba, lpPoints=0x119e4d8, cPoints=0x2 | out: lpPoints=0x119e4d8) returned -16253418 [0092.933] SendMessageW (hWnd=0x102bc, Msg=0x2210, wParam=0x2bc0001, lParam=0x102bc) returned 0x0 [0092.933] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x2210, wParam=0x2bc0001, lParam=0x102bc) returned 0x0 [0092.933] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0092.934] GetParent (hWnd=0x102bc) returned 0x102ba [0092.934] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.934] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.934] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.2bf8098_r11_ad1", lpWindowName="https://www.youtube.com/watch?v=Ji9IwPId5Uk", dwStyle=0x5601000d, X=11, Y=44, nWidth=243, nHeight=13, hWndParent=0x102ba, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102be [0092.934] SetWindowLongW (hWnd=0x102be, nIndex=-4, dwNewLong=2002237664) returned 89327318 [0092.934] GetWindowLongW (hWnd=0x102be, nIndex=-4) returned 2002237664 [0092.934] SetWindowLongW (hWnd=0x102be, nIndex=-4, dwNewLong=89327598) returned 2002237664 [0092.934] GetWindowLongW (hWnd=0x102be, nIndex=-4) returned 89327598 [0092.934] GetWindowLongW (hWnd=0x102be, nIndex=-16) returned 1174470669 [0092.934] GetWindowLongW (hWnd=0x102be, nIndex=-12) returned 0 [0092.934] SetWindowLongW (hWnd=0x102be, nIndex=-12, dwNewLong=66238) returned 0 [0092.934] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0x81, wParam=0x0, lParam=0x119e770) returned 0x1 [0092.934] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0x83, wParam=0x0, lParam=0x119e75c) returned 0x0 [0092.935] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0x1, wParam=0x0, lParam=0x119e770) returned 0x0 [0092.935] GetWindow (hWnd=0x102be, uCmd=0x3) returned 0x102bc [0092.935] GetClientRect (in: hWnd=0x102be, lpRect=0x119e478 | out: lpRect=0x119e478) returned 1 [0092.935] GetWindowRect (in: hWnd=0x102be, lpRect=0x119e478 | out: lpRect=0x119e478) returned 1 [0092.935] GetParent (hWnd=0x102be) returned 0x102ba [0092.935] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102ba, lpPoints=0x119e478, cPoints=0x2 | out: lpPoints=0x119e478) returned -16253418 [0092.935] SetWindowTextW (hWnd=0x102be, lpString="https://www.youtube.com/watch?v=Ji9IwPId5Uk") returned 1 [0092.935] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0xc, wParam=0x0, lParam=0x2eba1d4) returned 0x1 [0092.935] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0x5, wParam=0x0, lParam=0xd00f3) returned 0x0 [0092.935] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0x3, wParam=0x0, lParam=0x2c000b) returned 0x0 [0092.935] GetClientRect (in: hWnd=0x102be, lpRect=0x119e4d4 | out: lpRect=0x119e4d4) returned 1 [0092.935] GetWindowRect (in: hWnd=0x102be, lpRect=0x119e4d4 | out: lpRect=0x119e4d4) returned 1 [0092.935] GetParent (hWnd=0x102be) returned 0x102ba [0092.935] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102ba, lpPoints=0x119e4d4, cPoints=0x2 | out: lpPoints=0x119e4d4) returned -16253418 [0092.935] SendMessageW (hWnd=0x102be, Msg=0x2210, wParam=0x2be0001, lParam=0x102be) returned 0x0 [0092.935] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0x2210, wParam=0x2be0001, lParam=0x102be) returned 0x0 [0092.935] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0092.935] GetParent (hWnd=0x102be) returned 0x102ba [0092.936] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.936] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.936] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.2bf8098_r11_ad1", lpWindowName="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n", dwStyle=0x5600000d, X=4, Y=18, nWidth=328, nHeight=73, hWndParent=0x102ba, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102c0 [0092.936] SetWindowLongW (hWnd=0x102c0, nIndex=-4, dwNewLong=2002237664) returned 89327318 [0092.936] GetWindowLongW (hWnd=0x102c0, nIndex=-4) returned 2002237664 [0092.936] SetWindowLongW (hWnd=0x102c0, nIndex=-4, dwNewLong=89327638) returned 2002237664 [0092.936] GetWindowLongW (hWnd=0x102c0, nIndex=-4) returned 89327638 [0092.936] GetWindowLongW (hWnd=0x102c0, nIndex=-16) returned 1174405133 [0092.936] GetWindowLongW (hWnd=0x102c0, nIndex=-12) returned 0 [0092.936] SetWindowLongW (hWnd=0x102c0, nIndex=-12, dwNewLong=66240) returned 0 [0092.936] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0x81, wParam=0x0, lParam=0x119e778) returned 0x1 [0092.936] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0x83, wParam=0x0, lParam=0x119e764) returned 0x0 [0092.936] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0x1, wParam=0x0, lParam=0x119e778) returned 0x0 [0092.936] GetWindow (hWnd=0x102c0, uCmd=0x3) returned 0x102be [0092.936] GetClientRect (in: hWnd=0x102c0, lpRect=0x119e488 | out: lpRect=0x119e488) returned 1 [0092.937] GetWindowRect (in: hWnd=0x102c0, lpRect=0x119e488 | out: lpRect=0x119e488) returned 1 [0092.937] GetParent (hWnd=0x102c0) returned 0x102ba [0092.937] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102ba, lpPoints=0x119e488, cPoints=0x2 | out: lpPoints=0x119e488) returned -16253418 [0092.937] SetWindowTextW (hWnd=0x102c0, lpString="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n") returned 1 [0092.937] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0xc, wParam=0x0, lParam=0x2eba254) returned 0x1 [0092.937] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0x5, wParam=0x0, lParam=0x490148) returned 0x0 [0092.937] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0x3, wParam=0x0, lParam=0x120004) returned 0x0 [0092.937] GetClientRect (in: hWnd=0x102c0, lpRect=0x119e4e4 | out: lpRect=0x119e4e4) returned 1 [0092.937] GetWindowRect (in: hWnd=0x102c0, lpRect=0x119e4e4 | out: lpRect=0x119e4e4) returned 1 [0092.937] GetParent (hWnd=0x102c0) returned 0x102ba [0092.937] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102ba, lpPoints=0x119e4e4, cPoints=0x2 | out: lpPoints=0x119e4e4) returned -16253418 [0092.937] SendMessageW (hWnd=0x102c0, Msg=0x2210, wParam=0x2c00001, lParam=0x102c0) returned 0x0 [0092.937] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0x2210, wParam=0x2c00001, lParam=0x102c0) returned 0x0 [0092.937] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0092.937] GetParent (hWnd=0x102c0) returned 0x102ba [0092.937] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.938] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.938] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName="Message", dwStyle=0x56000000, X=12, Y=17, nWidth=363, nHeight=196, hWndParent=0x30258, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102c2 [0092.938] SetWindowLongW (hWnd=0x102c2, nIndex=-4, dwNewLong=1949416938) returned 89327078 [0092.938] GetWindowLongW (hWnd=0x102c2, nIndex=-4) returned 1949416938 [0092.938] SetWindowLongW (hWnd=0x102c2, nIndex=-4, dwNewLong=89327678) returned 1949416938 [0092.938] GetWindowLongW (hWnd=0x102c2, nIndex=-4) returned 89327678 [0092.938] GetWindowLongW (hWnd=0x102c2, nIndex=-16) returned 1174405120 [0092.938] GetWindowLongW (hWnd=0x102c2, nIndex=-12) returned 0 [0092.938] SetWindowLongW (hWnd=0x102c2, nIndex=-12, dwNewLong=66242) returned 0 [0092.938] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x81, wParam=0x0, lParam=0x119e7b0) returned 0x1 [0092.938] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x83, wParam=0x0, lParam=0x119e79c) returned 0x0 [0092.938] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x1, wParam=0x0, lParam=0x119e7b0) returned 0x0 [0092.938] GetWindow (hWnd=0x102c2, uCmd=0x3) returned 0x102ba [0092.938] GetClientRect (in: hWnd=0x102c2, lpRect=0x119e4f0 | out: lpRect=0x119e4f0) returned 1 [0092.938] GetWindowRect (in: hWnd=0x102c2, lpRect=0x119e4f0 | out: lpRect=0x119e4f0) returned 1 [0092.938] GetParent (hWnd=0x102c2) returned 0x30258 [0092.938] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e4f0, cPoints=0x2 | out: lpPoints=0x119e4f0) returned -8454251 [0092.938] SetWindowTextW (hWnd=0x102c2, lpString="Message") returned 1 [0092.938] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0xc, wParam=0x0, lParam=0x2eba104) returned 0x1 [0092.939] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x5, wParam=0x0, lParam=0xc4016b) returned 0x0 [0092.939] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x3, wParam=0x0, lParam=0x11000c) returned 0x0 [0092.939] GetClientRect (in: hWnd=0x102c2, lpRect=0x119e54c | out: lpRect=0x119e54c) returned 1 [0092.939] GetWindowRect (in: hWnd=0x102c2, lpRect=0x119e54c | out: lpRect=0x119e54c) returned 1 [0092.939] GetParent (hWnd=0x102c2) returned 0x30258 [0092.939] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e54c, cPoints=0x2 | out: lpPoints=0x119e54c) returned -8454251 [0092.939] SendMessageW (hWnd=0x102c2, Msg=0x2210, wParam=0x2c20001, lParam=0x102c2) returned 0x0 [0092.939] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x2210, wParam=0x2c20001, lParam=0x102c2) returned 0x0 [0092.939] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0092.939] GetParent (hWnd=0x102c2) returned 0x30258 [0092.939] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0092.939] GetClassInfoW (in: hInstance=0x0, lpClassName="RichEdit20W", lpWndClass=0x2ec8fb8 | out: lpWndClass=0x2ec8fb8) returned 1 [0092.939] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.941] CoTaskMemAlloc (cb=0x62) returned 0x1608e08 [0092.941] RegisterClassW (lpWndClass=0x119ebd4) returned 0xc1c8 [0092.941] CoTaskMemFree (pv=0x1608e08) [0092.941] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0092.941] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.RichEdit20W.app.0.2bf8098_r11_ad1", lpWindowName=0x0, dwStyle=0x56210844, X=3, Y=16, nWidth=357, nHeight=177, hWndParent=0x102c2, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102c4 [0092.941] SetWindowLongW (hWnd=0x102c4, nIndex=-4, dwNewLong=1945902605) returned 89326774 [0092.941] GetWindowLongW (hWnd=0x102c4, nIndex=-4) returned 1945902605 [0092.941] SetWindowLongW (hWnd=0x102c4, nIndex=-4, dwNewLong=89340198) returned 1945902605 [0092.941] GetWindowLongW (hWnd=0x102c4, nIndex=-4) returned 89340198 [0092.941] GetWindowLongW (hWnd=0x102c4, nIndex=-16) returned 1176569924 [0092.941] GetWindowLongW (hWnd=0x102c4, nIndex=-12) returned 0 [0092.941] SetWindowLongW (hWnd=0x102c4, nIndex=-12, dwNewLong=66244) returned 0 [0092.941] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x81, wParam=0x0, lParam=0x119e758) returned 0x1 [0092.943] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x7c, wParam=0xffffffec, lParam=0x119d928) returned 0x0 [0092.943] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x7d, wParam=0xffffffec, lParam=0x119d928) returned 0x0 [0092.948] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x83, wParam=0x0, lParam=0x119e744) returned 0x0 [0092.948] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x1, wParam=0x0, lParam=0x119e758) returned 0x0 [0092.950] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x46, wParam=0x0, lParam=0x119d924) returned 0x0 [0092.951] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x83, wParam=0x1, lParam=0x119d8fc) returned 0x0 [0092.951] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x47, wParam=0x0, lParam=0x119d924) returned 0x0 [0092.951] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x5, wParam=0x0, lParam=0xad0161) returned 0x0 [0092.951] GetClientRect (in: hWnd=0x102c4, lpRect=0x119d660 | out: lpRect=0x119d660) returned 1 [0092.951] GetWindowRect (in: hWnd=0x102c4, lpRect=0x119d660 | out: lpRect=0x119d660) returned 1 [0092.951] GetParent (hWnd=0x102c4) returned 0x102c2 [0092.951] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102c2, lpPoints=0x119d660, cPoints=0x2 | out: lpPoints=0x119d660) returned -9568375 [0092.951] GetParent (hWnd=0x102c4) returned 0x102c2 [0093.374] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x7c, wParam=0xfffffff0, lParam=0x119d9f0) returned 0x0 [0093.374] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x7d, wParam=0xfffffff0, lParam=0x119d9f0) returned 0x1 [0093.374] GetWindow (hWnd=0x102c4, uCmd=0x3) returned 0x0 [0093.374] GetClientRect (in: hWnd=0x102c4, lpRect=0x119e47c | out: lpRect=0x119e47c) returned 1 [0093.374] GetWindowRect (in: hWnd=0x102c4, lpRect=0x119e47c | out: lpRect=0x119e47c) returned 1 [0093.374] GetParent (hWnd=0x102c4) returned 0x102c2 [0093.374] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102c2, lpPoints=0x119e47c, cPoints=0x2 | out: lpPoints=0x119e47c) returned -9568375 [0093.374] SendMessageW (hWnd=0x102c4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0093.374] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0093.375] SendMessageW (hWnd=0x102c4, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0093.375] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0093.375] SendMessageW (hWnd=0x102c4, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0093.375] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0093.377] SendMessageW (hWnd=0x102c4, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0x841 [0093.377] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0x841 [0093.377] SendMessageW (hWnd=0x102c4, Msg=0x443, wParam=0x0, lParam=0x0) returned 0xffffff [0093.377] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x443, wParam=0x0, lParam=0x0) returned 0xffffff [0093.378] SendMessageW (hWnd=0x102c4, Msg=0x43a, wParam=0x0, lParam=0x119e358) returned 0xf800003f [0093.378] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x43a, wParam=0x0, lParam=0x119e358) returned 0xf800003f [0093.378] SendMessageW (hWnd=0x102c4, Msg=0x444, wParam=0x4, lParam=0x119e358) returned 0x1 [0093.378] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x444, wParam=0x4, lParam=0x119e358) returned 0x1 [0093.379] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119d3dc) returned 0x0 [0093.383] SendMessageW (hWnd=0x102c4, Msg=0x2111, wParam=0x30002c4, lParam=0x102c4) returned 0x0 [0093.384] SendMessageW (hWnd=0x102c4, Msg=0x30, wParam=0xc0a08e3, lParam=0x0) returned 0x1 [0093.384] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x30, wParam=0xc0a08e3, lParam=0x0) returned 0x1 [0093.385] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119cfd8) returned 0x0 [0093.385] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119d39c) returned 0x0 [0093.385] SendMessageW (hWnd=0x102c4, Msg=0x2111, wParam=0x30002c4, lParam=0x102c4) returned 0x0 [0093.385] SendMessageW (hWnd=0x102c4, Msg=0x43a, wParam=0x0, lParam=0x119e02c) returned 0xf800003f [0093.385] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x43a, wParam=0x0, lParam=0x119e02c) returned 0xf800003f [0093.385] SendMessageW (hWnd=0x102c4, Msg=0x444, wParam=0x4, lParam=0x119e02c) returned 0x1 [0093.385] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x444, wParam=0x4, lParam=0x119e02c) returned 0x1 [0093.385] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119d0ac) returned 0x0 [0093.385] SendMessageW (hWnd=0x102c4, Msg=0x2111, wParam=0x30002c4, lParam=0x102c4) returned 0x0 [0093.385] GetSystemMetrics (nIndex=5) returned 1 [0093.385] GetSystemMetrics (nIndex=6) returned 1 [0093.385] SendMessageW (hWnd=0x102c4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0093.385] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0093.394] SendMessageW (hWnd=0x102c4, Msg=0x446, wParam=0x0, lParam=0x1580030) returned 0x1 [0093.394] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x446, wParam=0x0, lParam=0x1580030) returned 0x1 [0093.400] DragAcceptFiles (hWnd=0x102c4, fAccept=0) [0093.400] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x7c, wParam=0xffffffec, lParam=0x119e340) returned 0x0 [0093.400] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x7d, wParam=0xffffffec, lParam=0x119e340) returned 0x1 [0093.400] SendMessageW (hWnd=0x102c4, Msg=0x437, wParam=0x0, lParam=0x2ec9ac8) returned 0x0 [0093.400] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x437, wParam=0x0, lParam=0x2ec9ac8) returned 0x0 [0093.400] SendMessageW (hWnd=0x102c4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0093.400] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0093.401] SendMessageW (hWnd=0x102c4, Msg=0x449, wParam=0x11, lParam=0x119e338) returned 0x23a [0093.401] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x449, wParam=0x11, lParam=0x119e338) returned 0x23a [0093.403] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119d278) returned 0x0 [0093.403] SendMessageW (hWnd=0x102c4, Msg=0x2111, wParam=0x30002c4, lParam=0x102c4) returned 0x0 [0093.403] SendMessageW (hWnd=0x102c4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0093.403] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0093.403] SendMessageW (hWnd=0x102c4, Msg=0xb9, wParam=0xffffffff, lParam=0x0) returned 0x0 [0093.403] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0xb9, wParam=0xffffffff, lParam=0x0) returned 0x0 [0093.403] SendMessageW (hWnd=0x102c4, Msg=0xba, wParam=0x0, lParam=0x0) returned 0xc [0093.403] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0xba, wParam=0x0, lParam=0x0) returned 0xc [0093.403] SendMessageW (hWnd=0x102c4, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0093.403] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0093.403] SendMessageW (hWnd=0x102c4, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0093.403] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0093.403] SendMessageW (hWnd=0x102c4, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0093.403] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0093.403] SendMessageW (hWnd=0x102c4, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0093.403] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0093.403] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x5, wParam=0x0, lParam=0xad0161) returned 0x0 [0093.404] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x3, wParam=0x0, lParam=0x120005) returned 0x0 [0093.404] GetClientRect (in: hWnd=0x102c4, lpRect=0x119e4d8 | out: lpRect=0x119e4d8) returned 1 [0093.404] GetWindowRect (in: hWnd=0x102c4, lpRect=0x119e4d8 | out: lpRect=0x119e4d8) returned 1 [0093.404] GetParent (hWnd=0x102c4) returned 0x102c2 [0093.404] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102c2, lpPoints=0x119e4d8, cPoints=0x2 | out: lpPoints=0x119e4d8) returned -9568375 [0093.404] SendMessageW (hWnd=0x102c4, Msg=0x2210, wParam=0x2c40001, lParam=0x102c4) returned 0x0 [0093.404] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x2210, wParam=0x2c40001, lParam=0x102c4) returned 0x0 [0093.404] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0093.404] GetParent (hWnd=0x102c4) returned 0x102c2 [0093.404] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.404] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0093.404] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName="Bictoins", dwStyle=0x56000000, X=12, Y=219, nWidth=711, nHeight=60, hWndParent=0x30258, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102c6 [0093.404] SetWindowLongW (hWnd=0x102c6, nIndex=-4, dwNewLong=1949416938) returned 89327078 [0093.404] GetWindowLongW (hWnd=0x102c6, nIndex=-4) returned 1949416938 [0093.405] SetWindowLongW (hWnd=0x102c6, nIndex=-4, dwNewLong=89340718) returned 1949416938 [0093.405] GetWindowLongW (hWnd=0x102c6, nIndex=-4) returned 89340718 [0093.405] GetWindowLongW (hWnd=0x102c6, nIndex=-16) returned 1174405120 [0093.405] GetWindowLongW (hWnd=0x102c6, nIndex=-12) returned 0 [0093.405] SetWindowLongW (hWnd=0x102c6, nIndex=-12, dwNewLong=66246) returned 0 [0093.405] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x81, wParam=0x0, lParam=0x119e7b0) returned 0x1 [0093.405] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x83, wParam=0x0, lParam=0x119e79c) returned 0x0 [0093.405] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x1, wParam=0x0, lParam=0x119e7b0) returned 0x0 [0093.405] GetWindow (hWnd=0x102c6, uCmd=0x3) returned 0x102c2 [0093.405] GetClientRect (in: hWnd=0x102c6, lpRect=0x119e4f0 | out: lpRect=0x119e4f0) returned 1 [0093.405] GetWindowRect (in: hWnd=0x102c6, lpRect=0x119e4f0 | out: lpRect=0x119e4f0) returned 1 [0093.405] GetParent (hWnd=0x102c6) returned 0x30258 [0093.405] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e4f0, cPoints=0x2 | out: lpPoints=0x119e4f0) returned -8454251 [0093.405] SetWindowTextW (hWnd=0x102c6, lpString="Bictoins") returned 1 [0093.405] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xc, wParam=0x0, lParam=0x2eb9fa8) returned 0x1 [0093.405] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x5, wParam=0x0, lParam=0x3c02c7) returned 0x0 [0093.406] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x3, wParam=0x0, lParam=0xdb000c) returned 0x0 [0093.406] GetClientRect (in: hWnd=0x102c6, lpRect=0x119e54c | out: lpRect=0x119e54c) returned 1 [0093.406] GetWindowRect (in: hWnd=0x102c6, lpRect=0x119e54c | out: lpRect=0x119e54c) returned 1 [0093.406] GetParent (hWnd=0x102c6) returned 0x30258 [0093.406] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e54c, cPoints=0x2 | out: lpPoints=0x119e54c) returned -8454251 [0093.406] SendMessageW (hWnd=0x102c6, Msg=0x2210, wParam=0x2c60001, lParam=0x102c6) returned 0x0 [0093.406] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x2210, wParam=0x2c60001, lParam=0x102c6) returned 0x0 [0093.406] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0093.406] GetParent (hWnd=0x102c6) returned 0x30258 [0093.406] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.406] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0093.406] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.2bf8098_r11_ad1", lpWindowName="Send 100$ to this bitcoins adress:", dwStyle=0x5600000d, X=6, Y=14, nWidth=166, nHeight=13, hWndParent=0x102c6, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102c8 [0093.406] SetWindowLongW (hWnd=0x102c8, nIndex=-4, dwNewLong=2002237664) returned 89327318 [0093.406] GetWindowLongW (hWnd=0x102c8, nIndex=-4) returned 2002237664 [0093.406] SetWindowLongW (hWnd=0x102c8, nIndex=-4, dwNewLong=89340438) returned 2002237664 [0093.406] GetWindowLongW (hWnd=0x102c8, nIndex=-4) returned 89340438 [0093.407] GetWindowLongW (hWnd=0x102c8, nIndex=-16) returned 1174405133 [0093.407] GetWindowLongW (hWnd=0x102c8, nIndex=-12) returned 0 [0093.407] SetWindowLongW (hWnd=0x102c8, nIndex=-12, dwNewLong=66248) returned 0 [0093.407] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0x81, wParam=0x0, lParam=0x119e778) returned 0x1 [0093.407] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0x83, wParam=0x0, lParam=0x119e764) returned 0x0 [0093.407] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0x1, wParam=0x0, lParam=0x119e778) returned 0x0 [0093.407] GetWindow (hWnd=0x102c8, uCmd=0x3) returned 0x0 [0093.407] GetClientRect (in: hWnd=0x102c8, lpRect=0x119e488 | out: lpRect=0x119e488) returned 1 [0093.407] GetWindowRect (in: hWnd=0x102c8, lpRect=0x119e488 | out: lpRect=0x119e488) returned 1 [0093.407] GetParent (hWnd=0x102c8) returned 0x102c6 [0093.407] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102c6, lpPoints=0x119e488, cPoints=0x2 | out: lpPoints=0x119e488) returned -22806647 [0093.407] SetWindowTextW (hWnd=0x102c8, lpString="Send 100$ to this bitcoins adress:") returned 1 [0093.407] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0xc, wParam=0x0, lParam=0x2eb9fe4) returned 0x1 [0093.407] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0x5, wParam=0x0, lParam=0xd00a6) returned 0x0 [0093.407] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0x3, wParam=0x0, lParam=0xe0006) returned 0x0 [0093.407] GetClientRect (in: hWnd=0x102c8, lpRect=0x119e4e4 | out: lpRect=0x119e4e4) returned 1 [0093.407] GetWindowRect (in: hWnd=0x102c8, lpRect=0x119e4e4 | out: lpRect=0x119e4e4) returned 1 [0093.407] GetParent (hWnd=0x102c8) returned 0x102c6 [0093.407] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102c6, lpPoints=0x119e4e4, cPoints=0x2 | out: lpPoints=0x119e4e4) returned -22806647 [0093.408] SendMessageW (hWnd=0x102c8, Msg=0x2210, wParam=0x2c80001, lParam=0x102c8) returned 0x0 [0093.408] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0x2210, wParam=0x2c80001, lParam=0x102c8) returned 0x0 [0093.408] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0093.408] GetParent (hWnd=0x102c8) returned 0x102c6 [0093.408] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.408] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0093.408] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.2bf8098_r11_ad1", lpWindowName="1PNh6dmaUtv96C7ezTdUqVvfWBUYuCBbUM", dwStyle=0x560108c0, X=6, Y=32, nWidth=699, nHeight=20, hWndParent=0x102c6, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102ca [0093.408] SetWindowLongW (hWnd=0x102ca, nIndex=-4, dwNewLong=2002237568) returned 89327398 [0093.408] GetWindowLongW (hWnd=0x102ca, nIndex=-4) returned 2002237568 [0093.408] SetWindowLongW (hWnd=0x102ca, nIndex=-4, dwNewLong=89340038) returned 2002237568 [0093.408] GetWindowLongW (hWnd=0x102ca, nIndex=-4) returned 89340038 [0093.408] GetWindowLongW (hWnd=0x102ca, nIndex=-16) returned 1174472896 [0093.408] GetWindowLongW (hWnd=0x102ca, nIndex=-12) returned 0 [0093.408] SetWindowLongW (hWnd=0x102ca, nIndex=-12, dwNewLong=66250) returned 0 [0093.408] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x81, wParam=0x0, lParam=0x119e758) returned 0x1 [0093.409] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x83, wParam=0x0, lParam=0x119e744) returned 0x0 [0093.409] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x1, wParam=0x0, lParam=0x119e758) returned 0x1 [0093.409] SendMessageW (hWnd=0x102ca, Msg=0x2111, wParam=0x40002ca, lParam=0x102ca) returned 0x0 [0093.409] SendMessageW (hWnd=0x102ca, Msg=0x2111, wParam=0x30002ca, lParam=0x102ca) returned 0x0 [0093.409] GetWindow (hWnd=0x102ca, uCmd=0x3) returned 0x102c8 [0093.409] GetClientRect (in: hWnd=0x102ca, lpRect=0x119e47c | out: lpRect=0x119e47c) returned 1 [0093.409] GetWindowRect (in: hWnd=0x102ca, lpRect=0x119e47c | out: lpRect=0x119e47c) returned 1 [0093.409] GetParent (hWnd=0x102ca) returned 0x102c6 [0093.410] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102c6, lpPoints=0x119e47c, cPoints=0x2 | out: lpPoints=0x119e47c) returned -22806647 [0093.410] GetDC (hWnd=0x0) returned 0x50108bd [0093.410] GdipCreateFromHDC (hdc=0x50108bd, graphics=0x119e324) returned 0x0 [0093.410] CoTaskMemAlloc (cb=0x5c) returned 0x15ec728 [0093.410] GdipGetLogFontW (font=0x54d1f08, graphics=0x56086d8, logfontW=0x15ec728) returned 0x0 [0093.410] CoTaskMemFree (pv=0x15ec728) [0093.410] CoTaskMemAlloc (cb=0x5c) returned 0x15ec728 [0093.410] CoTaskMemFree (pv=0x15ec728) [0093.410] CoTaskMemAlloc (cb=0x5c) returned 0x15ec7f8 [0093.410] CoTaskMemFree (pv=0x15ec7f8) [0093.410] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0093.410] ReleaseDC (hWnd=0x0, hDC=0x50108bd) returned 1 [0093.410] CoTaskMemAlloc (cb=0x5c) returned 0x15ec520 [0093.410] CreateFontIndirectW (lplf=0x15ec520) returned 0x1d0a090e [0093.410] CoTaskMemFree (pv=0x15ec520) [0093.410] SendMessageW (hWnd=0x102ca, Msg=0x30, wParam=0x1d0a090e, lParam=0x0) returned 0x1 [0093.410] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x30, wParam=0x1d0a090e, lParam=0x0) returned 0x1 [0093.410] SendMessageW (hWnd=0x102ca, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0093.410] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0093.410] SetWindowTextW (hWnd=0x102ca, lpString="1PNh6dmaUtv96C7ezTdUqVvfWBUYuCBbUM") returned 1 [0093.410] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0xc, wParam=0x0, lParam=0x2eba090) returned 0x1 [0093.410] SendMessageW (hWnd=0x102ca, Msg=0x2111, wParam=0x40002ca, lParam=0x102ca) returned 0x0 [0093.411] SendMessageW (hWnd=0x102ca, Msg=0x2111, wParam=0x30002ca, lParam=0x102ca) returned 0x0 [0093.411] GetSystemMetrics (nIndex=5) returned 1 [0093.411] GetSystemMetrics (nIndex=6) returned 1 [0093.411] SendMessageW (hWnd=0x102ca, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0093.411] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0093.411] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x5, wParam=0x0, lParam=0x1002b7) returned 0x0 [0093.411] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x3, wParam=0x0, lParam=0x220008) returned 0x0 [0093.411] GetClientRect (in: hWnd=0x102ca, lpRect=0x119e4d8 | out: lpRect=0x119e4d8) returned 1 [0093.411] GetWindowRect (in: hWnd=0x102ca, lpRect=0x119e4d8 | out: lpRect=0x119e4d8) returned 1 [0093.411] GetParent (hWnd=0x102ca) returned 0x102c6 [0093.411] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102c6, lpPoints=0x119e4d8, cPoints=0x2 | out: lpPoints=0x119e4d8) returned -22806647 [0093.411] SendMessageW (hWnd=0x102ca, Msg=0x2210, wParam=0x2ca0001, lParam=0x102ca) returned 0x0 [0093.411] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x2210, wParam=0x2ca0001, lParam=0x102ca) returned 0x0 [0093.411] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0093.411] GetParent (hWnd=0x102ca) returned 0x102c6 [0093.411] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.411] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0093.412] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName="Time", dwStyle=0x56000000, X=381, Y=17, nWidth=340, nHeight=94, hWndParent=0x30258, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102cc [0093.412] SetWindowLongW (hWnd=0x102cc, nIndex=-4, dwNewLong=1949416938) returned 89327078 [0093.412] GetWindowLongW (hWnd=0x102cc, nIndex=-4) returned 1949416938 [0093.412] SetWindowLongW (hWnd=0x102cc, nIndex=-4, dwNewLong=89340238) returned 1949416938 [0093.412] GetWindowLongW (hWnd=0x102cc, nIndex=-4) returned 89340238 [0093.412] GetWindowLongW (hWnd=0x102cc, nIndex=-16) returned 1174405120 [0093.412] GetWindowLongW (hWnd=0x102cc, nIndex=-12) returned 0 [0093.412] SetWindowLongW (hWnd=0x102cc, nIndex=-12, dwNewLong=66252) returned 0 [0093.412] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0x81, wParam=0x0, lParam=0x119e7b0) returned 0x1 [0093.412] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0x83, wParam=0x0, lParam=0x119e79c) returned 0x0 [0093.412] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0x1, wParam=0x0, lParam=0x119e7b0) returned 0x0 [0093.412] GetWindow (hWnd=0x102cc, uCmd=0x3) returned 0x102c6 [0093.412] GetClientRect (in: hWnd=0x102cc, lpRect=0x119e4f0 | out: lpRect=0x119e4f0) returned 1 [0093.412] GetWindowRect (in: hWnd=0x102cc, lpRect=0x119e4f0 | out: lpRect=0x119e4f0) returned 1 [0093.412] GetParent (hWnd=0x102cc) returned 0x30258 [0093.412] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e4f0, cPoints=0x2 | out: lpPoints=0x119e4f0) returned -8454251 [0093.412] SetWindowTextW (hWnd=0x102cc, lpString="Time") returned 1 [0093.412] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0xc, wParam=0x0, lParam=0x2eb9ed8) returned 0x1 [0093.413] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0x5, wParam=0x0, lParam=0x5e0154) returned 0x0 [0093.413] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0x3, wParam=0x0, lParam=0x11017d) returned 0x0 [0093.413] GetClientRect (in: hWnd=0x102cc, lpRect=0x119e54c | out: lpRect=0x119e54c) returned 1 [0093.413] GetWindowRect (in: hWnd=0x102cc, lpRect=0x119e54c | out: lpRect=0x119e54c) returned 1 [0093.413] GetParent (hWnd=0x102cc) returned 0x30258 [0093.413] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e54c, cPoints=0x2 | out: lpPoints=0x119e54c) returned -8454251 [0093.413] SendMessageW (hWnd=0x102cc, Msg=0x2210, wParam=0x2cc0001, lParam=0x102cc) returned 0x0 [0093.413] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0x2210, wParam=0x2cc0001, lParam=0x102cc) returned 0x0 [0093.413] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0093.413] GetParent (hWnd=0x102cc) returned 0x30258 [0093.413] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.413] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0093.413] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.2bf8098_r11_ad1", lpWindowName="Destruction de fichier prevue le ", dwStyle=0x5600000d, X=6, Y=65, nWidth=328, nHeight=23, hWndParent=0x102cc, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102ce [0093.414] SetWindowLongW (hWnd=0x102ce, nIndex=-4, dwNewLong=2002237664) returned 89327318 [0093.414] GetWindowLongW (hWnd=0x102ce, nIndex=-4) returned 2002237664 [0093.414] SetWindowLongW (hWnd=0x102ce, nIndex=-4, dwNewLong=89340758) returned 2002237664 [0093.414] GetWindowLongW (hWnd=0x102ce, nIndex=-4) returned 89340758 [0093.414] GetWindowLongW (hWnd=0x102ce, nIndex=-16) returned 1174405133 [0093.414] GetWindowLongW (hWnd=0x102ce, nIndex=-12) returned 0 [0093.414] SetWindowLongW (hWnd=0x102ce, nIndex=-12, dwNewLong=66254) returned 0 [0093.414] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0x81, wParam=0x0, lParam=0x119e778) returned 0x1 [0093.416] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0x83, wParam=0x0, lParam=0x119e764) returned 0x0 [0093.416] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0x1, wParam=0x0, lParam=0x119e778) returned 0x0 [0093.416] GetWindow (hWnd=0x102ce, uCmd=0x3) returned 0x0 [0093.416] GetClientRect (in: hWnd=0x102ce, lpRect=0x119e488 | out: lpRect=0x119e488) returned 1 [0093.416] GetWindowRect (in: hWnd=0x102ce, lpRect=0x119e488 | out: lpRect=0x119e488) returned 1 [0093.416] GetParent (hWnd=0x102ce) returned 0x102cc [0093.416] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x119e488, cPoints=0x2 | out: lpPoints=0x119e488) returned -9568744 [0093.416] SetWindowTextW (hWnd=0x102ce, lpString="Destruction de fichier prevue le ") returned 1 [0093.416] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0xc, wParam=0x0, lParam=0x2eb9f0c) returned 0x1 [0093.417] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0x5, wParam=0x0, lParam=0x170148) returned 0x0 [0093.417] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0x3, wParam=0x0, lParam=0x410006) returned 0x0 [0093.417] GetClientRect (in: hWnd=0x102ce, lpRect=0x119e4e4 | out: lpRect=0x119e4e4) returned 1 [0093.417] GetWindowRect (in: hWnd=0x102ce, lpRect=0x119e4e4 | out: lpRect=0x119e4e4) returned 1 [0093.417] GetParent (hWnd=0x102ce) returned 0x102cc [0093.417] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x119e4e4, cPoints=0x2 | out: lpPoints=0x119e4e4) returned -9568744 [0093.417] SendMessageW (hWnd=0x102ce, Msg=0x2210, wParam=0x2ce0001, lParam=0x102ce) returned 0x0 [0093.417] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0x2210, wParam=0x2ce0001, lParam=0x102ce) returned 0x0 [0093.417] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0093.417] GetParent (hWnd=0x102ce) returned 0x102cc [0093.421] InitCommonControlsEx (picce=0x2ecc110) returned 1 [0093.421] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.421] GetClassInfoW (in: hInstance=0x0, lpClassName="msctls_progress32", lpWndClass=0x2ecc17c | out: lpWndClass=0x2ecc17c) returned 1 [0093.421] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0093.421] CoTaskMemAlloc (cb=0x6e) returned 0x160da90 [0093.421] RegisterClassW (lpWndClass=0x119ebd0) returned 0xc1cb [0093.421] CoTaskMemFree (pv=0x160da90) [0093.421] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0093.421] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.msctls_progress32.app.0.2bf8098_r11_ad1", lpWindowName=0x0, dwStyle=0x56010000, X=6, Y=19, nWidth=328, nHeight=33, hWndParent=0x102cc, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102d0 [0093.422] SetWindowLongW (hWnd=0x102d0, nIndex=-4, dwNewLong=1999119598) returned 89339838 [0093.422] GetWindowLongW (hWnd=0x102d0, nIndex=-4) returned 1999119598 [0093.422] SetWindowLongW (hWnd=0x102d0, nIndex=-4, dwNewLong=89340278) returned 1999119598 [0093.422] GetWindowLongW (hWnd=0x102d0, nIndex=-4) returned 89340278 [0093.422] GetWindowLongW (hWnd=0x102d0, nIndex=-16) returned 1174470656 [0093.422] GetWindowLongW (hWnd=0x102d0, nIndex=-12) returned 0 [0093.422] SetWindowLongW (hWnd=0x102d0, nIndex=-12, dwNewLong=66256) returned 0 [0093.422] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x81, wParam=0x0, lParam=0x119e750) returned 0x1 [0093.422] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x83, wParam=0x0, lParam=0x119e73c) returned 0x0 [0093.422] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x1, wParam=0x0, lParam=0x119e750) returned 0x0 [0093.422] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x7c, wParam=0xffffffec, lParam=0x119e2e4) returned 0x0 [0093.423] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x7d, wParam=0xffffffec, lParam=0x119e2e4) returned 0x0 [0093.423] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x46, wParam=0x0, lParam=0x119e2f4) returned 0x0 [0093.423] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x83, wParam=0x1, lParam=0x119e2cc) returned 0x0 [0093.423] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x47, wParam=0x0, lParam=0x119e2f4) returned 0x0 [0093.423] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x3, wParam=0x0, lParam=0x140007) returned 0x0 [0093.423] GetClientRect (in: hWnd=0x102d0, lpRect=0x119daa0 | out: lpRect=0x119daa0) returned 1 [0093.423] GetWindowRect (in: hWnd=0x102d0, lpRect=0x119daa0 | out: lpRect=0x119daa0) returned 1 [0093.423] GetParent (hWnd=0x102d0) returned 0x102cc [0093.423] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x119daa0, cPoints=0x2 | out: lpPoints=0x119daa0) returned -9568744 [0093.423] GetWindowTextLengthW (hWnd=0x102d0) returned 0 [0093.423] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0093.423] GetSystemMetrics (nIndex=42) returned 0 [0093.423] GetWindowTextW (in: hWnd=0x102d0, lpString=0x119d930, nMaxCount=1 | out: lpString="") returned 0 [0093.423] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0xd, wParam=0x1, lParam=0x119d930) returned 0x0 [0093.423] GetWindowTextLengthW (hWnd=0x102cc) returned 4 [0093.423] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0093.423] GetSystemMetrics (nIndex=42) returned 0 [0093.423] GetWindowTextW (in: hWnd=0x102cc, lpString=0x119d8e8, nMaxCount=5 | out: lpString="Time") returned 4 [0093.423] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0xd, wParam=0x5, lParam=0x119d8e8) returned 0x4 [0093.423] GetWindowTextLengthW (hWnd=0x102cc) returned 4 [0093.423] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0093.423] GetSystemMetrics (nIndex=42) returned 0 [0093.423] GetWindowTextW (in: hWnd=0x102cc, lpString=0x119d954, nMaxCount=5 | out: lpString="Time") returned 4 [0093.423] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0xd, wParam=0x5, lParam=0x119d954) returned 0x4 [0093.423] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x5, wParam=0x0, lParam=0x1f0146) returned 0x0 [0093.423] GetClientRect (in: hWnd=0x102d0, lpRect=0x119e058 | out: lpRect=0x119e058) returned 1 [0093.423] GetWindowRect (in: hWnd=0x102d0, lpRect=0x119e058 | out: lpRect=0x119e058) returned 1 [0093.424] GetParent (hWnd=0x102d0) returned 0x102cc [0093.424] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x119e058, cPoints=0x2 | out: lpPoints=0x119e058) returned -9568744 [0093.424] GetParent (hWnd=0x102d0) returned 0x102cc [0093.424] GetWindow (hWnd=0x102d0, uCmd=0x3) returned 0x102ce [0093.424] GetClientRect (in: hWnd=0x102d0, lpRect=0x119e49c | out: lpRect=0x119e49c) returned 1 [0093.424] GetWindowRect (in: hWnd=0x102d0, lpRect=0x119e49c | out: lpRect=0x119e49c) returned 1 [0093.424] GetParent (hWnd=0x102d0) returned 0x102cc [0093.424] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x119e49c, cPoints=0x2 | out: lpPoints=0x119e49c) returned -9568744 [0093.424] SendMessageW (hWnd=0x102d0, Msg=0x30, wParam=0xc0a08e3, lParam=0x0) returned 0x0 [0093.424] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x30, wParam=0xc0a08e3, lParam=0x0) returned 0x0 [0093.424] SendMessageW (hWnd=0x102d0, Msg=0x406, wParam=0x0, lParam=0x64) returned 0x640000 [0093.424] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x406, wParam=0x0, lParam=0x64) returned 0x640000 [0093.424] SendMessageW (hWnd=0x102d0, Msg=0x404, wParam=0xa, lParam=0x0) returned 0xa [0093.424] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x404, wParam=0xa, lParam=0x0) returned 0xa [0093.424] SendMessageW (hWnd=0x102d0, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0093.424] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0093.425] SendMessageW (hWnd=0x102d0, Msg=0x2001, wParam=0x0, lParam=0x0) returned 0xff000000 [0093.425] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x2001, wParam=0x0, lParam=0x0) returned 0xff000000 [0093.425] SendMessageW (hWnd=0x102d0, Msg=0x409, wParam=0x0, lParam=0xff) returned 0xff000000 [0093.425] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x409, wParam=0x0, lParam=0xff) returned 0xff000000 [0093.425] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x5, wParam=0x0, lParam=0x1f0146) returned 0x0 [0093.425] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x3, wParam=0x0, lParam=0x130006) returned 0x0 [0093.425] GetClientRect (in: hWnd=0x102d0, lpRect=0x119e4f8 | out: lpRect=0x119e4f8) returned 1 [0093.425] GetWindowRect (in: hWnd=0x102d0, lpRect=0x119e4f8 | out: lpRect=0x119e4f8) returned 1 [0093.425] GetParent (hWnd=0x102d0) returned 0x102cc [0093.425] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102cc, lpPoints=0x119e4f8, cPoints=0x2 | out: lpPoints=0x119e4f8) returned -9568744 [0093.425] SendMessageW (hWnd=0x102d0, Msg=0x2210, wParam=0x2d00001, lParam=0x102d0) returned 0x0 [0093.425] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x2210, wParam=0x2d00001, lParam=0x102d0) returned 0x0 [0093.426] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0093.426] GetParent (hWnd=0x102d0) returned 0x102cc [0093.426] InitCommonControlsEx (picce=0x2ecc754) returned 1 [0093.426] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.426] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0093.426] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.msctls_progress32.app.0.2bf8098_r11_ad1", lpWindowName=0x0, dwStyle=0x56010000, X=15, Y=393, nWidth=710, nHeight=35, hWndParent=0x30258, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102d2 [0093.426] SetWindowLongW (hWnd=0x102d2, nIndex=-4, dwNewLong=1999119598) returned 89339838 [0093.426] GetWindowLongW (hWnd=0x102d2, nIndex=-4) returned 1999119598 [0093.426] SetWindowLongW (hWnd=0x102d2, nIndex=-4, dwNewLong=89340478) returned 1999119598 [0093.426] GetWindowLongW (hWnd=0x102d2, nIndex=-4) returned 89340478 [0093.426] GetWindowLongW (hWnd=0x102d2, nIndex=-16) returned 1174470656 [0093.426] GetWindowLongW (hWnd=0x102d2, nIndex=-12) returned 0 [0093.426] SetWindowLongW (hWnd=0x102d2, nIndex=-12, dwNewLong=66258) returned 0 [0093.426] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x81, wParam=0x0, lParam=0x119e790) returned 0x1 [0093.427] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x83, wParam=0x0, lParam=0x119e77c) returned 0x0 [0093.427] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x1, wParam=0x0, lParam=0x119e790) returned 0x0 [0093.427] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x7c, wParam=0xffffffec, lParam=0x119e324) returned 0x0 [0093.427] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x7d, wParam=0xffffffec, lParam=0x119e324) returned 0x0 [0093.428] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x46, wParam=0x0, lParam=0x119e334) returned 0x0 [0093.428] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x83, wParam=0x1, lParam=0x119e30c) returned 0x0 [0093.428] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x47, wParam=0x0, lParam=0x119e334) returned 0x0 [0093.428] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x3, wParam=0x0, lParam=0x18a0010) returned 0x0 [0093.428] GetClientRect (in: hWnd=0x102d2, lpRect=0x119dae0 | out: lpRect=0x119dae0) returned 1 [0093.428] GetWindowRect (in: hWnd=0x102d2, lpRect=0x119dae0 | out: lpRect=0x119dae0) returned 1 [0093.428] GetParent (hWnd=0x102d2) returned 0x30258 [0093.428] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119dae0, cPoints=0x2 | out: lpPoints=0x119dae0) returned -8454251 [0093.428] GetWindowTextLengthW (hWnd=0x102d2) returned 0 [0093.428] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0093.428] GetSystemMetrics (nIndex=42) returned 0 [0093.428] GetWindowTextW (in: hWnd=0x102d2, lpString=0x119d970, nMaxCount=1 | out: lpString="") returned 0 [0093.428] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xd, wParam=0x1, lParam=0x119d970) returned 0x0 [0093.428] GetWindowTextLengthW (hWnd=0x30258) returned 15 [0093.428] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0093.428] GetSystemMetrics (nIndex=42) returned 0 [0093.428] GetWindowTextW (in: hWnd=0x30258, lpString=0x119d974, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0093.428] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xd, wParam=0x10, lParam=0x119d974) returned 0xf [0093.428] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x5, wParam=0x0, lParam=0x2102c4) returned 0x0 [0093.428] GetClientRect (in: hWnd=0x102d2, lpRect=0x119e098 | out: lpRect=0x119e098) returned 1 [0093.428] GetWindowRect (in: hWnd=0x102d2, lpRect=0x119e098 | out: lpRect=0x119e098) returned 1 [0093.428] GetParent (hWnd=0x102d2) returned 0x30258 [0093.428] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e098, cPoints=0x2 | out: lpPoints=0x119e098) returned -8454251 [0093.428] GetParent (hWnd=0x102d2) returned 0x30258 [0093.428] GetWindow (hWnd=0x102d2, uCmd=0x3) returned 0x102cc [0093.428] GetClientRect (in: hWnd=0x102d2, lpRect=0x119e4dc | out: lpRect=0x119e4dc) returned 1 [0093.428] GetWindowRect (in: hWnd=0x102d2, lpRect=0x119e4dc | out: lpRect=0x119e4dc) returned 1 [0093.429] GetParent (hWnd=0x102d2) returned 0x30258 [0093.429] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e4dc, cPoints=0x2 | out: lpPoints=0x119e4dc) returned -8454251 [0093.429] SendMessageW (hWnd=0x102d2, Msg=0x30, wParam=0xc0a08e3, lParam=0x0) returned 0x0 [0093.429] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x30, wParam=0xc0a08e3, lParam=0x0) returned 0x0 [0093.429] SendMessageW (hWnd=0x102d2, Msg=0x406, wParam=0x0, lParam=0x64) returned 0x640000 [0093.429] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x406, wParam=0x0, lParam=0x64) returned 0x640000 [0093.429] SendMessageW (hWnd=0x102d2, Msg=0x404, wParam=0xa, lParam=0x0) returned 0xa [0093.429] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x404, wParam=0xa, lParam=0x0) returned 0xa [0093.429] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0093.429] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0093.429] SendMessageW (hWnd=0x102d2, Msg=0x2001, wParam=0x0, lParam=0x0) returned 0xff000000 [0093.429] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x2001, wParam=0x0, lParam=0x0) returned 0xff000000 [0093.429] SendMessageW (hWnd=0x102d2, Msg=0x409, wParam=0x0, lParam=0xff9933) returned 0xff000000 [0093.429] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x409, wParam=0x0, lParam=0xff9933) returned 0xff000000 [0093.429] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x5, wParam=0x0, lParam=0x2102c4) returned 0x0 [0093.429] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x3, wParam=0x0, lParam=0x189000f) returned 0x0 [0093.429] GetClientRect (in: hWnd=0x102d2, lpRect=0x119e538 | out: lpRect=0x119e538) returned 1 [0093.429] GetWindowRect (in: hWnd=0x102d2, lpRect=0x119e538 | out: lpRect=0x119e538) returned 1 [0093.429] GetParent (hWnd=0x102d2) returned 0x30258 [0093.429] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e538, cPoints=0x2 | out: lpPoints=0x119e538) returned -8454251 [0093.429] SendMessageW (hWnd=0x102d2, Msg=0x2210, wParam=0x2d20001, lParam=0x102d2) returned 0x0 [0093.429] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x2210, wParam=0x2d20001, lParam=0x102d2) returned 0x0 [0093.429] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0093.430] GetParent (hWnd=0x102d2) returned 0x30258 [0093.430] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.430] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0093.430] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.2bf8098_r11_ad1", lpWindowName="Decrypt", dwStyle=0x5601000b, X=14, Y=351, nWidth=711, nHeight=36, hWndParent=0x30258, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102d4 [0093.430] SetWindowLongW (hWnd=0x102d4, nIndex=-4, dwNewLong=2002237440) returned 89327518 [0093.430] GetWindowLongW (hWnd=0x102d4, nIndex=-4) returned 2002237440 [0093.430] SetWindowLongW (hWnd=0x102d4, nIndex=-4, dwNewLong=89340518) returned 2002237440 [0093.430] GetWindowLongW (hWnd=0x102d4, nIndex=-4) returned 89340518 [0093.430] GetWindowLongW (hWnd=0x102d4, nIndex=-16) returned 1174470667 [0093.430] GetWindowLongW (hWnd=0x102d4, nIndex=-12) returned 0 [0093.430] SetWindowLongW (hWnd=0x102d4, nIndex=-12, dwNewLong=66260) returned 0 [0093.430] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x81, wParam=0x0, lParam=0x119e7b0) returned 0x1 [0093.431] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x83, wParam=0x0, lParam=0x119e79c) returned 0x0 [0093.431] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x1, wParam=0x0, lParam=0x119e7b0) returned 0x0 [0093.431] GetWindow (hWnd=0x102d4, uCmd=0x3) returned 0x102d2 [0093.431] GetClientRect (in: hWnd=0x102d4, lpRect=0x119e4b4 | out: lpRect=0x119e4b4) returned 1 [0093.431] GetWindowRect (in: hWnd=0x102d4, lpRect=0x119e4b4 | out: lpRect=0x119e4b4) returned 1 [0093.431] GetParent (hWnd=0x102d4) returned 0x30258 [0093.431] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e4b4, cPoints=0x2 | out: lpPoints=0x119e4b4) returned -8454251 [0093.431] SetWindowTextW (hWnd=0x102d4, lpString="Decrypt") returned 1 [0093.431] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0xc, wParam=0x0, lParam=0x2eb9e68) returned 0x1 [0093.431] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x5, wParam=0x0, lParam=0x2402c7) returned 0x0 [0093.431] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x3, wParam=0x0, lParam=0x15f000e) returned 0x0 [0093.431] GetClientRect (in: hWnd=0x102d4, lpRect=0x119e510 | out: lpRect=0x119e510) returned 1 [0093.431] GetWindowRect (in: hWnd=0x102d4, lpRect=0x119e510 | out: lpRect=0x119e510) returned 1 [0093.431] GetParent (hWnd=0x102d4) returned 0x30258 [0093.431] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30258, lpPoints=0x119e510, cPoints=0x2 | out: lpPoints=0x119e510) returned -8454251 [0093.431] SendMessageW (hWnd=0x102d4, Msg=0x2210, wParam=0x2d40001, lParam=0x102d4) returned 0x0 [0093.431] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x2210, wParam=0x2d40001, lParam=0x102d4) returned 0x0 [0093.431] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0093.431] GetParent (hWnd=0x102d4) returned 0x30258 [0093.432] GetWindowTextLengthW (hWnd=0x30258) returned 15 [0093.432] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0093.432] GetSystemMetrics (nIndex=42) returned 0 [0093.432] GetWindowTextW (in: hWnd=0x30258, lpString=0x119ed10, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0093.432] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xd, wParam=0x10, lParam=0x119ed10) returned 0xf [0093.466] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x119ed4c | out: phkResult=0x119ed4c*=0x298) returned 0x0 [0093.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x119e7e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0093.468] RegQueryValueExW (in: hKey=0x298, lpValueName="#Decryptor", lpReserved=0x0, lpType=0x119ed48, lpData=0x0, lpcbData=0x119ed44*=0x0 | out: lpType=0x119ed48*=0x0, lpData=0x0, lpcbData=0x119ed44*=0x0) returned 0x2 [0093.469] RegSetValueExW (in: hKey=0x298, lpValueName="#Decryptor", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", cbData=0x58 | out: lpData="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe") returned 0x0 [0093.469] SendMessageW (hWnd=0x102d0, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0093.469] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0093.470] GetStockObject (i=5) returned 0x1900015 [0093.470] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0093.471] CoTaskMemAlloc (cb=0x5c) returned 0x15ec520 [0093.471] RegisterClassW (lpWndClass=0x119ebe0) returned 0xc174 [0093.471] CoTaskMemFree (pv=0x15ec520) [0093.471] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0093.471] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.2bf8098_r11_ad1", lpWindowName="TimerNativeWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x102d6 [0093.471] SetWindowLongW (hWnd=0x102d6, nIndex=-4, dwNewLong=1949416938) returned 89340318 [0093.471] GetWindowLongW (hWnd=0x102d6, nIndex=-4) returned 1949416938 [0093.471] SetWindowLongW (hWnd=0x102d6, nIndex=-4, dwNewLong=89340558) returned 1949416938 [0093.471] GetWindowLongW (hWnd=0x102d6, nIndex=-4) returned 89340558 [0093.471] GetWindowLongW (hWnd=0x102d6, nIndex=-16) returned 79691776 [0093.471] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102d6, Msg=0x24, wParam=0x0, lParam=0x119e76c) returned 0x0 [0093.471] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102d6, Msg=0x81, wParam=0x0, lParam=0x119e760) returned 0x1 [0093.472] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102d6, Msg=0x83, wParam=0x0, lParam=0x119e74c) returned 0x0 [0093.472] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102d6, Msg=0x1, wParam=0x0, lParam=0x119e760) returned 0x0 [0093.473] SetTimer (hWnd=0x102d6, nIDEvent=0x1, uElapse=0x64, lpTimerFunc=0x0) returned 0x1 [0093.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x119e7e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0093.473] CoTaskMemAlloc (cb=0x20c) returned 0x1620808 [0093.473] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1620808 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Desktop") returned 0x0 [0093.481] CoTaskMemFree (pv=0x1620808) [0093.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x119e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0093.482] CoTaskMemAlloc (cb=0x20c) returned 0x1620808 [0093.482] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1620808 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Desktop") returned 0x0 [0093.482] CoTaskMemFree (pv=0x1620808) [0093.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0x119e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0093.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0x119e838, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0093.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ecb8) returned 1 [0093.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe"), fInfoLevelId=0x0, lpFileInformation=0x119ed34 | out: lpFileInformation=0x119ed34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713a8ae4, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x713f4fc3, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x714414d6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x62405)) returned 1 [0093.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ecb4) returned 1 [0093.557] GetWindowTextLengthW (hWnd=0x102ce) returned 33 [0093.558] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x21 [0093.558] GetSystemMetrics (nIndex=42) returned 0 [0093.558] GetWindowTextW (in: hWnd=0x102ce, lpString=0x119ec90, nMaxCount=34 | out: lpString="Destruction de fichier prevue le ") returned 33 [0093.558] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0xd, wParam=0x22, lParam=0x119ec90) returned 0x21 [0093.558] GetWindowTextLengthW (hWnd=0x102ce) returned 33 [0093.558] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x21 [0093.558] GetSystemMetrics (nIndex=42) returned 0 [0093.558] GetWindowTextW (in: hWnd=0x102ce, lpString=0x119ec8c, nMaxCount=34 | out: lpString="Destruction de fichier prevue le ") returned 33 [0093.558] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0xd, wParam=0x22, lParam=0x119ec8c) returned 0x21 [0093.558] SetWindowTextW (hWnd=0x102ce, lpString="Your files will deleted after 30 days") returned 1 [0093.558] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0xc, wParam=0x0, lParam=0x2ed19d8) returned 0x1 [0093.558] InvalidateRect (hWnd=0x102ce, lpRect=0x0, bErase=1) returned 1 [0093.559] SetForegroundWindow (hWnd=0x30258) returned 1 [0093.559] InvalidateRect (hWnd=0x202a8, lpRect=0x0, bErase=1) returned 1 [0093.561] InvalidateRect (hWnd=0x102b6, lpRect=0x119ecf4, bErase=1) returned 1 [0093.561] InvalidateRect (hWnd=0x102ba, lpRect=0x0, bErase=1) returned 1 [0093.561] InvalidateRect (hWnd=0x102be, lpRect=0x119ecf4, bErase=0) returned 1 [0093.561] InvalidateRect (hWnd=0x102c2, lpRect=0x0, bErase=1) returned 1 [0093.561] InvalidateRect (hWnd=0x102c6, lpRect=0x0, bErase=1) returned 1 [0093.561] InvalidateRect (hWnd=0x102c8, lpRect=0x119ecf4, bErase=1) returned 1 [0093.561] InvalidateRect (hWnd=0x102cc, lpRect=0x0, bErase=1) returned 1 [0093.561] InvalidateRect (hWnd=0x102d2, lpRect=0x0, bErase=1) returned 1 [0093.561] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0093.561] GetWindowThreadProcessId (in: hWnd=0x30258, lpdwProcessId=0x119ed8c | out: lpdwProcessId=0x119ed8c) returned 0x9e4 [0093.561] GetCurrentThreadId () returned 0x9e4 [0093.562] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc14b [0093.562] PostMessageW (hWnd=0x30258, Msg=0xc14b, wParam=0x0, lParam=0x0) returned 1 [0093.562] GetWindowTextLengthW (hWnd=0x30258) returned 15 [0093.562] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0093.562] GetSystemMetrics (nIndex=42) returned 0 [0093.562] GetWindowTextW (in: hWnd=0x30258, lpString=0x119ecf8, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0093.562] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xd, wParam=0x10, lParam=0x119ecf8) returned 0xf [0093.562] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x46, wParam=0x0, lParam=0x119f140) returned 0x0 [0093.569] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.569] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0093.569] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0093.569] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0093.569] GetWindowPlacement (in: hWnd=0x30258, lpwndpl=0x119eef0 | out: lpwndpl=0x119eef0) returned 1 [0093.569] GetClientRect (in: hWnd=0x30258, lpRect=0x119ee9c | out: lpRect=0x119ee9c) returned 1 [0093.569] GetWindowTextLengthW (hWnd=0x30258) returned 15 [0093.569] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0093.569] GetSystemMetrics (nIndex=42) returned 0 [0093.569] GetWindowTextW (in: hWnd=0x30258, lpString=0x119ed54, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0093.569] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xd, wParam=0x10, lParam=0x119ed54) returned 0xf [0093.569] GetClientRect (in: hWnd=0x30258, lpRect=0x119eda4 | out: lpRect=0x119eda4) returned 1 [0093.570] GetSystemMetrics (nIndex=80) returned 1 [0093.576] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x55338ae, dwData=0x0) returned 1 [0093.576] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x119ea18 | out: lpmi=0x119ea18) returned 1 [0093.576] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x2501085a [0093.577] GetDeviceCaps (hdc=0x2501085a, index=12) returned 32 [0093.577] GetDeviceCaps (hdc=0x2501085a, index=14) returned 1 [0093.577] DeleteDC (hdc=0x2501085a) returned 1 [0093.577] GetCurrentObject (hdc=0x470108fd, type=0x1) returned 0x1b00017 [0093.577] GetCurrentObject (hdc=0x470108fd, type=0x2) returned 0x1900010 [0093.577] GetCurrentObject (hdc=0x470108fd, type=0x7) returned 0xf0506d3 [0093.577] GetCurrentObject (hdc=0x470108fd, type=0x6) returned 0x18a0048 [0093.577] SaveDC (hdc=0x470108fd) returned 1 [0093.577] GetNearestColor (hdc=0x470108fd, color=0x0) returned 0x0 [0093.577] CreateSolidBrush (color=0x0) returned 0x3210086a [0093.577] FillRect (hDC=0x470108fd, lprc=0x119ec44, hbr=0x3210086a) returned 1 [0093.577] DeleteObject (ho=0x3210086a) returned 1 [0093.578] RestoreDC (hdc=0x470108fd, nSavedDC=-1) returned 1 [0093.578] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.578] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.578] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.578] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x14, wParam=0xe010919, lParam=0x0) returned 0x1 [0093.578] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.578] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.578] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x14, wParam=0x50108bd, lParam=0x0) returned 0x1 [0093.578] GetStockObject (i=5) returned 0x1900015 [0093.579] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.579] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.579] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.579] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.580] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x14, wParam=0xe010919, lParam=0x0) returned 0x1 [0093.580] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.580] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.580] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.580] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x14, wParam=0xe010919, lParam=0x0) returned 0x1 [0093.580] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.580] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.581] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.581] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x14, wParam=0xe010919, lParam=0x0) returned 0x1 [0093.581] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.581] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x14, wParam=0x470108fd, lParam=0x0) returned 0x1 [0093.582] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.582] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x14, wParam=0x50108bd, lParam=0x0) returned 0x1 [0093.582] GetStockObject (i=5) returned 0x1900015 [0093.582] GetWindowPlacement (in: hWnd=0x30258, lpwndpl=0x119eed4 | out: lpwndpl=0x119eed4) returned 1 [0093.582] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x47, wParam=0x0, lParam=0x119f140) returned 0x0 [0093.582] GetClientRect (in: hWnd=0x30258, lpRect=0x119ee84 | out: lpRect=0x119ee84) returned 1 [0093.582] GetWindowRect (in: hWnd=0x30258, lpRect=0x119ee84 | out: lpRect=0x119ee84) returned 1 [0093.582] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0093.582] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0093.582] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0093.582] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x5, wParam=0x0, lParam=0x1c302ec) returned 0x0 [0093.582] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x3, wParam=0x0, lParam=0x82006b) returned 0x0 [0093.583] GetClientRect (in: hWnd=0x30258, lpRect=0x119eeb4 | out: lpRect=0x119eeb4) returned 1 [0093.583] GetWindowRect (in: hWnd=0x30258, lpRect=0x119eeb4 | out: lpRect=0x119eeb4) returned 1 [0093.583] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0093.583] GetFocus () returned 0x30258 [0093.583] SetFocus (hWnd=0x102d4) returned 0x30258 [0093.583] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x8, wParam=0x102d4, lParam=0x0) returned 0x0 [0093.583] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0093.583] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0093.584] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0093.584] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x7, wParam=0x30258, lParam=0x0) returned 0x0 [0093.584] GetStockObject (i=5) returned 0x1900015 [0093.584] GetDlgItem (hDlg=0x30258, nIDDlgItem=66260) returned 0x102d4 [0093.585] SendMessageW (hWnd=0x102d4, Msg=0x202b, wParam=0x102d4, lParam=0x119eb94) returned 0x0 [0093.585] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x202b, wParam=0x102d4, lParam=0x119eb94) returned 0x0 [0093.585] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0093.585] GetFocus () returned 0x102d4 [0093.585] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.585] IsWindowUnicode (hWnd=0x30258) returned 1 [0093.586] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.595] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.595] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.595] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0093.595] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.595] IsWindowUnicode (hWnd=0x30258) returned 1 [0093.595] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.595] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.595] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.596] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.596] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x1710344) returned 0x1 [0093.596] IsWindowUnicode (hWnd=0x30258) returned 1 [0093.596] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.596] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x1710344) returned 0x1 [0093.596] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0093.597] SetCursor (hCursor=0x10003) returned 0x10007 [0093.597] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.597] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.598] _TrackMouseEvent (in: lpEventTrack=0x2ed2928 | out: lpEventTrack=0x2ed2928) returned 1 [0093.598] SendMessageW (hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0093.598] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0093.598] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x200, wParam=0x0, lParam=0xef02d9) returned 0x0 [0093.598] GetKeyState (nVirtKey=2) returned 1 [0093.598] GetKeyState (nVirtKey=4) returned 0 [0093.598] GetKeyState (nVirtKey=5) returned 0 [0093.598] GetKeyState (nVirtKey=6) returned 0 [0093.598] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.598] IsWindowUnicode (hWnd=0x30258) returned 1 [0093.598] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.598] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.598] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.599] BeginPaint (in: hWnd=0x30258, lpPaint=0x119ed38 | out: lpPaint=0x119ed38) returned 0x470108fd [0093.599] GdipCreateHalftonePalette () returned 0x4b08085a [0093.599] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.599] GetWindowTextLengthW (hWnd=0x30258) returned 15 [0093.599] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0093.599] GetSystemMetrics (nIndex=42) returned 0 [0093.599] GetWindowTextW (in: hWnd=0x30258, lpString=0x119ecc0, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0093.599] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xd, wParam=0x10, lParam=0x119ecc0) returned 0xf [0093.599] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.600] EndPaint (hWnd=0x30258, lpPaint=0x119ed34) returned 1 [0093.600] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.600] IsWindowUnicode (hWnd=0x202a8) returned 1 [0093.600] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.600] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.600] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.600] BeginPaint (in: hWnd=0x202a8, lpPaint=0x119ed4c | out: lpPaint=0x119ed4c) returned 0x50108bd [0093.600] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.600] GetWindowTextLengthW (hWnd=0x202a8) returned 7 [0093.600] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0093.600] GetSystemMetrics (nIndex=42) returned 0 [0093.600] GetWindowTextW (in: hWnd=0x202a8, lpString=0x119ecf0, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0093.600] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xd, wParam=0x8, lParam=0x119ecf0) returned 0x7 [0093.600] GetClientRect (in: hWnd=0x202a8, lpRect=0x119edac | out: lpRect=0x119edac) returned 1 [0093.600] GetCurrentObject (hdc=0x50108bd, type=0x1) returned 0x1b00017 [0093.600] GetCurrentObject (hdc=0x50108bd, type=0x2) returned 0x1900010 [0093.600] GetCurrentObject (hdc=0x50108bd, type=0x7) returned 0xf0506d3 [0093.600] GetCurrentObject (hdc=0x50108bd, type=0x6) returned 0x18a0048 [0093.600] SaveDC (hdc=0x50108bd) returned 1 [0093.600] GetNearestColor (hdc=0x50108bd, color=0x0) returned 0x0 [0093.600] CreateSolidBrush (color=0x0) returned 0x3310086a [0093.600] FillRect (hDC=0x50108bd, lprc=0x119ec4c, hbr=0x3310086a) returned 1 [0093.600] DeleteObject (ho=0x3310086a) returned 1 [0093.600] RestoreDC (hdc=0x50108bd, nSavedDC=-1) returned 1 [0093.600] GetWindowTextLengthW (hWnd=0x202a8) returned 7 [0093.600] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0093.600] GetSystemMetrics (nIndex=42) returned 0 [0093.600] GetWindowTextW (in: hWnd=0x202a8, lpString=0x119ecf0, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0093.600] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xd, wParam=0x8, lParam=0x119ecf0) returned 0x7 [0093.601] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119ecac, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8bytÜî\x19\x01ô*í\x02\x18", lpUsedDefaultChar=0x0) returned 17 [0093.601] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0093.601] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=1) returned 0x4b08085a [0093.601] GdipCreateFromHDC (hdc=0x50108bd, graphics=0x119ebd0) returned 0x0 [0093.601] GdipSetPageUnit (graphics=0x56086d8, unit=0x2) returned 0x0 [0093.602] GdipCreateMatrix (matrix=0x119eb90) returned 0x0 [0093.602] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x56033e8) returned 0x0 [0093.605] GdipIsMatrixIdentity (matrix=0x56033e8, result=0x119eba8) returned 0x0 [0093.605] GdipDeleteMatrix (matrix=0x56033e8) returned 0x0 [0093.605] GdipCreateRegion (region=0x119eb90) returned 0x0 [0093.605] GdipGetClip (graphics=0x56086d8, region=0x5603418) returned 0x0 [0093.606] GdipIsInfiniteRegion (region=0x5603418, graphics=0x56086d8, result=0x119eb9c) returned 0x0 [0093.606] GdipDeleteRegion (region=0x5603418) returned 0x0 [0093.606] GdipSaveGraphics (graphics=0x56086d8, state=0x119ebc8) returned 0x0 [0093.606] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119ebac) returned 0x0 [0093.607] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119ebac) returned 0x0 [0093.607] GdipCreateRegion (region=0x119eb4c) returned 0x0 [0093.607] GdipGetClip (graphics=0x56086d8, region=0x5608d38) returned 0x0 [0093.607] GdipCreateMatrix (matrix=0x119eb4c) returned 0x0 [0093.607] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5603678) returned 0x0 [0093.607] GdipIsMatrixIdentity (matrix=0x5603678, result=0x119eb64) returned 0x0 [0093.607] GdipGetMatrixElements (matrix=0x5603678, matrixOut=0x15d6520) returned 0x0 [0093.608] LocalFree (hMem=0x15d6520) returned 0x0 [0093.608] GdipDeleteMatrix (matrix=0x5603678) returned 0x0 [0093.608] GdipIsInfiniteRegion (region=0x5608d38, graphics=0x56086d8, result=0x119eb90) returned 0x0 [0093.608] GdipDeleteRegion (region=0x5608d38) returned 0x0 [0093.608] GdipGetDC (graphics=0x56086d8, hdc=0x119eb98) returned 0x0 [0093.608] GetCurrentObject (hdc=0x50108bd, type=0x1) returned 0x1b00017 [0093.608] GetCurrentObject (hdc=0x50108bd, type=0x2) returned 0x1900010 [0093.608] GetCurrentObject (hdc=0x50108bd, type=0x7) returned 0xf0506d3 [0093.608] GetCurrentObject (hdc=0x50108bd, type=0x6) returned 0x18a0048 [0093.608] SaveDC (hdc=0x50108bd) returned 1 [0093.608] OffsetViewportOrgEx (in: hdc=0x50108bd, x=0, y=0, lppt=0x2ed3104 | out: lppt=0x2ed3104) returned 1 [0093.608] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x119ebd0, fWinIni=0x0 | out: pvParam=0x119ebd0) returned 1 [0093.608] SendMessageW (hWnd=0x30258, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0093.608] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0093.608] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.608] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.608] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.609] GetStockObject (i=5) returned 0x1900015 [0093.609] GetDlgItem (hDlg=0x202a8, nIDDlgItem=66230) returned 0x102b6 [0093.609] SendMessageW (hWnd=0x102b6, Msg=0x202b, wParam=0x102b6, lParam=0x119d80c) returned 0x0 [0093.609] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0x202b, wParam=0x102b6, lParam=0x119d80c) returned 0x0 [0093.609] RedrawWindow (hWnd=0x102b6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.609] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.609] RedrawWindow (hWnd=0x102b8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.609] RedrawWindow (hWnd=0x202a8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.609] InvalidateRect (hWnd=0x102b6, lpRect=0x119de70, bErase=1) returned 1 [0093.609] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.609] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.609] GetStockObject (i=5) returned 0x1900015 [0093.609] GetStockObject (i=5) returned 0x1900015 [0093.609] GetDlgItem (hDlg=0x102ba, nIDDlgItem=66236) returned 0x102bc [0093.609] SendMessageW (hWnd=0x102bc, Msg=0x202b, wParam=0x102bc, lParam=0x119d7cc) returned 0x0 [0093.609] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x202b, wParam=0x102bc, lParam=0x119d7cc) returned 0x0 [0093.609] RedrawWindow (hWnd=0x102bc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.609] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.609] GetStockObject (i=5) returned 0x1900015 [0093.609] GetDlgItem (hDlg=0x102ba, nIDDlgItem=66238) returned 0x102be [0093.609] SendMessageW (hWnd=0x102be, Msg=0x202b, wParam=0x102be, lParam=0x119d804) returned 0x0 [0093.609] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0x202b, wParam=0x102be, lParam=0x119d804) returned 0x0 [0093.609] RedrawWindow (hWnd=0x102be, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.610] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.610] GetStockObject (i=5) returned 0x1900015 [0093.610] GetDlgItem (hDlg=0x102ba, nIDDlgItem=66240) returned 0x102c0 [0093.610] SendMessageW (hWnd=0x102c0, Msg=0x202b, wParam=0x102c0, lParam=0x119d80c) returned 0x0 [0093.610] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0x202b, wParam=0x102c0, lParam=0x119d80c) returned 0x0 [0093.610] RedrawWindow (hWnd=0x102c0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.610] RedrawWindow (hWnd=0x102ba, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.610] InvalidateRect (hWnd=0x102be, lpRect=0x119de70, bErase=0) returned 1 [0093.610] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.610] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.610] RedrawWindow (hWnd=0x102c4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.610] RedrawWindow (hWnd=0x102c2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.610] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.610] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.610] GetStockObject (i=5) returned 0x1900015 [0093.610] GetDlgItem (hDlg=0x102c6, nIDDlgItem=66248) returned 0x102c8 [0093.610] SendMessageW (hWnd=0x102c8, Msg=0x202b, wParam=0x102c8, lParam=0x119d80c) returned 0x0 [0093.610] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0x202b, wParam=0x102c8, lParam=0x119d80c) returned 0x0 [0093.610] RedrawWindow (hWnd=0x102c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.610] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.610] RedrawWindow (hWnd=0x102ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.610] RedrawWindow (hWnd=0x102c6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.610] InvalidateRect (hWnd=0x102c8, lpRect=0x119de70, bErase=1) returned 1 [0093.610] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.611] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.611] GetStockObject (i=5) returned 0x1900015 [0093.611] GetDlgItem (hDlg=0x102cc, nIDDlgItem=66254) returned 0x102ce [0093.611] SendMessageW (hWnd=0x102ce, Msg=0x202b, wParam=0x102ce, lParam=0x119d80c) returned 0x0 [0093.611] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0x202b, wParam=0x102ce, lParam=0x119d80c) returned 0x0 [0093.611] RedrawWindow (hWnd=0x102ce, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.611] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.611] RedrawWindow (hWnd=0x102d0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.611] RedrawWindow (hWnd=0x102cc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.611] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.611] RedrawWindow (hWnd=0x102d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.611] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0093.611] GetStockObject (i=5) returned 0x1900015 [0093.611] GetStockObject (i=5) returned 0x1900015 [0093.611] GetDlgItem (hDlg=0x30258, nIDDlgItem=66260) returned 0x102d4 [0093.611] SendMessageW (hWnd=0x102d4, Msg=0x202b, wParam=0x102d4, lParam=0x119dca4) returned 0x0 [0093.611] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x202b, wParam=0x102d4, lParam=0x119dca4) returned 0x0 [0093.611] RedrawWindow (hWnd=0x102d4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.611] RedrawWindow (hWnd=0x30258, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0093.612] GetCurrentObject (hdc=0x50108bd, type=0x6) returned 0x18a0048 [0093.612] GetObjectW (in: h=0x18a0048, c=92, pv=0x119ea78 | out: pv=0x119ea78) returned 92 [0093.612] SelectObject (hdc=0x50108bd, h=0xb20a08b8) returned 0x18a0048 [0093.612] DrawTextExW (in: hdc=0x50108bd, lpchText="Decrypt", cchText=7, lprc=0x119ebb4, format=0x102410, lpdtp=0x2ed3408 | out: lpchText="Decrypt", lprc=0x119ebb4) returned 13 [0093.612] GetTextAlign (hdc=0x50108bd) returned 0x0 [0093.613] GetTextColor (hdc=0x50108bd) returned 0x0 [0093.613] SetTextColor (hdc=0x50108bd, color=0xf0f0f0) returned 0x0 [0093.613] GetCurrentObject (hdc=0x50108bd, type=0x6) returned 0xb20a08b8 [0093.613] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119e924 | out: pv=0x119e924) returned 92 [0093.613] GetBkMode (hdc=0x50108bd) returned 2 [0093.613] SetBkMode (hdc=0x50108bd, mode=1) returned 2 [0093.613] DrawTextExW (in: hdc=0x50108bd, lpchText="Decrypt", cchText=7, lprc=0x119eb58, format=0x102010, lpdtp=0x2ed35d0 | out: lpchText="Decrypt", lprc=0x119eb58) returned 13 [0093.613] RestoreDC (hdc=0x50108bd, nSavedDC=-1) returned 1 [0093.614] GdipReleaseDC (graphics=0x56086d8, hdc=0x50108bd) returned 0x0 [0093.614] GetDC (hWnd=0x0) returned 0xe010919 [0093.614] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119eb4c) returned 0x0 [0093.614] GdipGetFontHeight (font=0x54def18, graphics=0x5608d38, height=0x119eb44) returned 0x0 [0093.614] GdipDeleteGraphics (graphics=0x5608d38) returned 0x0 [0093.614] ReleaseDC (hWnd=0x0, hDC=0xe010919) returned 1 [0093.616] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=1, y1=6, x2=1, y2=59) returned 0x0 [0093.628] GdipDrawLineI (graphics=0x56086d8, pen=0x5608b78, x1=0, y1=6, x2=0, y2=58) returned 0x0 [0093.628] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=0, y1=59, x2=711, y2=59) returned 0x0 [0093.629] GdipDrawLineI (graphics=0x56086d8, pen=0x5608b78, x1=0, y1=58, x2=710, y2=58) returned 0x0 [0093.629] GdipDrawLineI (graphics=0x56086d8, pen=0x5608b78, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0093.629] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0093.629] GdipDrawLineI (graphics=0x56086d8, pen=0x5608b78, x1=52, y1=5, x2=709, y2=5) returned 0x0 [0093.630] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=52, y1=6, x2=710, y2=6) returned 0x0 [0093.630] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=710, y1=5, x2=710, y2=59) returned 0x0 [0093.630] GdipDrawLineI (graphics=0x56086d8, pen=0x5608b78, x1=709, y1=6, x2=709, y2=58) returned 0x0 [0093.630] GdipDeletePen (pen=0x56089b8) returned 0x0 [0093.630] GdipDeletePen (pen=0x5608b78) returned 0x0 [0093.630] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0093.630] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=0) returned 0x4b08085a [0093.630] SelectPalette (hdc=0x50108bd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.630] EndPaint (hWnd=0x202a8, lpPaint=0x119ed48) returned 1 [0093.630] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.631] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x1660343) returned 0x1 [0093.631] IsWindowUnicode (hWnd=0x30258) returned 1 [0093.631] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.631] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x1660343) returned 0x1 [0093.631] SetCursor (hCursor=0x10003) returned 0x10003 [0093.631] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.631] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.631] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x200, wParam=0x0, lParam=0xe402d8) returned 0x0 [0093.631] GetKeyState (nVirtKey=1) returned 0 [0093.631] GetKeyState (nVirtKey=2) returned 1 [0093.631] GetKeyState (nVirtKey=4) returned 0 [0093.631] GetKeyState (nVirtKey=5) returned 0 [0093.631] GetKeyState (nVirtKey=6) returned 0 [0093.631] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.631] IsWindowUnicode (hWnd=0x30258) returned 1 [0093.631] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.631] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.631] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.631] BeginPaint (in: hWnd=0x30258, lpPaint=0x119ed38 | out: lpPaint=0x119ed38) returned 0x50108bd [0093.631] GetWindowPlacement (in: hWnd=0x30258, lpwndpl=0x119ea84 | out: lpwndpl=0x119ea84) returned 1 [0093.631] GetClientRect (in: hWnd=0x30258, lpRect=0x119ea30 | out: lpRect=0x119ea30) returned 1 [0093.631] GetWindowTextLengthW (hWnd=0x30258) returned 15 [0093.631] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0093.631] GetSystemMetrics (nIndex=42) returned 0 [0093.631] GetWindowTextW (in: hWnd=0x30258, lpString=0x119e8e8, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0093.631] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xd, wParam=0x10, lParam=0x119e8e8) returned 0xf [0093.631] GetClientRect (in: hWnd=0x30258, lpRect=0x119e938 | out: lpRect=0x119e938) returned 1 [0093.631] GetCurrentObject (hdc=0x50108bd, type=0x1) returned 0x1b00017 [0093.631] GetCurrentObject (hdc=0x50108bd, type=0x2) returned 0x1900010 [0093.631] GetCurrentObject (hdc=0x50108bd, type=0x7) returned 0xf0506d3 [0093.631] GetCurrentObject (hdc=0x50108bd, type=0x6) returned 0x18a0048 [0093.632] SaveDC (hdc=0x50108bd) returned 1 [0093.632] GetNearestColor (hdc=0x50108bd, color=0x0) returned 0x0 [0093.632] CreateSolidBrush (color=0x0) returned 0x3410086a [0093.632] FillRect (hDC=0x50108bd, lprc=0x119e7d8, hbr=0x3410086a) returned 1 [0093.632] DeleteObject (ho=0x3410086a) returned 1 [0093.632] RestoreDC (hdc=0x50108bd, nSavedDC=-1) returned 1 [0093.632] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.632] GetWindowTextLengthW (hWnd=0x30258) returned 15 [0093.632] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0093.632] GetSystemMetrics (nIndex=42) returned 0 [0093.632] GetWindowTextW (in: hWnd=0x30258, lpString=0x119ecc0, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0093.632] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xd, wParam=0x10, lParam=0x119ecc0) returned 0xf [0093.632] SelectPalette (hdc=0x50108bd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.632] EndPaint (hWnd=0x30258, lpPaint=0x119ed34) returned 1 [0093.632] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.632] IsWindowUnicode (hWnd=0x202a8) returned 1 [0093.632] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.632] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.632] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.632] BeginPaint (in: hWnd=0x202a8, lpPaint=0x119ed4c | out: lpPaint=0x119ed4c) returned 0xe010919 [0093.632] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.632] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.632] GetWindowTextLengthW (hWnd=0x202a8) returned 7 [0093.632] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0093.632] GetSystemMetrics (nIndex=42) returned 0 [0093.632] GetWindowTextW (in: hWnd=0x202a8, lpString=0x119ecf0, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0093.633] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xd, wParam=0x8, lParam=0x119ecf0) returned 0x7 [0093.633] GetClientRect (in: hWnd=0x202a8, lpRect=0x119edac | out: lpRect=0x119edac) returned 1 [0093.633] GetCurrentObject (hdc=0xe010919, type=0x1) returned 0x1b00017 [0093.633] GetCurrentObject (hdc=0xe010919, type=0x2) returned 0x1900010 [0093.633] GetCurrentObject (hdc=0xe010919, type=0x7) returned 0xf0506d3 [0093.633] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0093.633] SaveDC (hdc=0xe010919) returned 1 [0093.633] GetNearestColor (hdc=0xe010919, color=0x0) returned 0x0 [0093.633] CreateSolidBrush (color=0x0) returned 0x3510086a [0093.633] FillRect (hDC=0xe010919, lprc=0x119ec4c, hbr=0x3510086a) returned 1 [0093.633] DeleteObject (ho=0x3510086a) returned 1 [0093.638] RestoreDC (hdc=0xe010919, nSavedDC=-1) returned 1 [0093.639] GetWindowTextLengthW (hWnd=0x202a8) returned 7 [0093.639] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0093.639] GetSystemMetrics (nIndex=42) returned 0 [0093.639] GetWindowTextW (in: hWnd=0x202a8, lpString=0x119ecf0, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0093.639] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xd, wParam=0x8, lParam=0x119ecf0) returned 0x7 [0093.639] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119ecac, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8bytÜî\x19\x01ø9í\x02\x18", lpUsedDefaultChar=0x0) returned 17 [0093.640] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0093.640] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x4b08085a [0093.640] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119ebd0) returned 0x0 [0093.640] GdipSetPageUnit (graphics=0x56086d8, unit=0x2) returned 0x0 [0093.640] GdipCreateMatrix (matrix=0x119eb90) returned 0x0 [0093.640] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x56089b8) returned 0x0 [0093.640] GdipIsMatrixIdentity (matrix=0x56089b8, result=0x119eba8) returned 0x0 [0093.640] GdipDeleteMatrix (matrix=0x56089b8) returned 0x0 [0093.640] GdipCreateRegion (region=0x119eb90) returned 0x0 [0093.640] GdipGetClip (graphics=0x56086d8, region=0x56089e8) returned 0x0 [0093.640] GdipIsInfiniteRegion (region=0x56089e8, graphics=0x56086d8, result=0x119eb9c) returned 0x0 [0093.640] GdipDeleteRegion (region=0x56089e8) returned 0x0 [0093.640] GdipSaveGraphics (graphics=0x56086d8, state=0x119ebc8) returned 0x0 [0093.640] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119ebac) returned 0x0 [0093.640] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119ebac) returned 0x0 [0093.640] GdipCreateRegion (region=0x119eb4c) returned 0x0 [0093.640] GdipGetClip (graphics=0x56086d8, region=0x5608c98) returned 0x0 [0093.640] GdipCreateMatrix (matrix=0x119eb4c) returned 0x0 [0093.640] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5603678) returned 0x0 [0093.640] GdipIsMatrixIdentity (matrix=0x5603678, result=0x119eb64) returned 0x0 [0093.640] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.640] GdipGetMatrixElements (matrix=0x5603678, matrixOut=0x15d6520) returned 0x0 [0093.640] LocalFree (hMem=0x15d6520) returned 0x0 [0093.640] GdipDeleteMatrix (matrix=0x5603678) returned 0x0 [0093.640] GdipIsInfiniteRegion (region=0x5608c98, graphics=0x56086d8, result=0x119eb90) returned 0x0 [0093.640] GdipDeleteRegion (region=0x5608c98) returned 0x0 [0093.640] GdipGetDC (graphics=0x56086d8, hdc=0x119eb98) returned 0x0 [0093.640] GetCurrentObject (hdc=0xe010919, type=0x1) returned 0x1b00017 [0093.640] GetCurrentObject (hdc=0xe010919, type=0x2) returned 0x1900010 [0093.640] GetCurrentObject (hdc=0xe010919, type=0x7) returned 0xf0506d3 [0093.641] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0093.641] SaveDC (hdc=0xe010919) returned 1 [0093.641] OffsetViewportOrgEx (in: hdc=0xe010919, x=0, y=0, lppt=0x2ed3f4c | out: lppt=0x2ed3f4c) returned 1 [0093.641] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0093.641] GetObjectW (in: h=0x18a0048, c=92, pv=0x119ea78 | out: pv=0x119ea78) returned 92 [0093.641] SelectObject (hdc=0xe010919, h=0xb20a08b8) returned 0x18a0048 [0093.641] DrawTextExW (in: hdc=0xe010919, lpchText="Decrypt", cchText=7, lprc=0x119ebb4, format=0x102410, lpdtp=0x2ed3f5c | out: lpchText="Decrypt", lprc=0x119ebb4) returned 13 [0093.641] GetTextAlign (hdc=0xe010919) returned 0x0 [0093.641] GetTextColor (hdc=0xe010919) returned 0x0 [0093.641] SetTextColor (hdc=0xe010919, color=0xf0f0f0) returned 0x0 [0093.641] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0xb20a08b8 [0093.641] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119e924 | out: pv=0x119e924) returned 92 [0093.641] GetBkMode (hdc=0xe010919) returned 2 [0093.641] SetBkMode (hdc=0xe010919, mode=1) returned 2 [0093.641] DrawTextExW (in: hdc=0xe010919, lpchText="Decrypt", cchText=7, lprc=0x119eb58, format=0x102010, lpdtp=0x2ed4124 | out: lpchText="Decrypt", lprc=0x119eb58) returned 13 [0093.641] RestoreDC (hdc=0xe010919, nSavedDC=-1) returned 1 [0093.641] GdipReleaseDC (graphics=0x56086d8, hdc=0xe010919) returned 0x0 [0093.641] GdipDrawLineI (graphics=0x56086d8, pen=0x5608b78, x1=1, y1=6, x2=1, y2=59) returned 0x0 [0093.642] GdipDrawLineI (graphics=0x56086d8, pen=0x5608c08, x1=0, y1=6, x2=0, y2=58) returned 0x0 [0093.642] GdipDrawLineI (graphics=0x56086d8, pen=0x5608b78, x1=0, y1=59, x2=711, y2=59) returned 0x0 [0093.642] GdipDrawLineI (graphics=0x56086d8, pen=0x5608c08, x1=0, y1=58, x2=710, y2=58) returned 0x0 [0093.642] GdipDrawLineI (graphics=0x56086d8, pen=0x5608c08, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0093.642] GdipDrawLineI (graphics=0x56086d8, pen=0x5608b78, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0093.642] GdipDrawLineI (graphics=0x56086d8, pen=0x5608c08, x1=52, y1=5, x2=709, y2=5) returned 0x0 [0093.642] GdipDrawLineI (graphics=0x56086d8, pen=0x5608b78, x1=52, y1=6, x2=710, y2=6) returned 0x0 [0093.643] GdipDrawLineI (graphics=0x56086d8, pen=0x5608b78, x1=710, y1=5, x2=710, y2=59) returned 0x0 [0093.643] GdipDrawLineI (graphics=0x56086d8, pen=0x5608c08, x1=709, y1=6, x2=709, y2=58) returned 0x0 [0093.643] GdipDeletePen (pen=0x5608b78) returned 0x0 [0093.643] GdipDeletePen (pen=0x5608c08) returned 0x0 [0093.643] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0093.643] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=0) returned 0x4b08085a [0093.643] SelectPalette (hdc=0xe010919, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.643] EndPaint (hWnd=0x202a8, lpPaint=0x119ed48) returned 1 [0093.643] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.643] IsWindowUnicode (hWnd=0x102b6) returned 1 [0093.643] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.643] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.643] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.643] BeginPaint (in: hWnd=0x102b6, lpPaint=0x119ed1c | out: lpPaint=0x119ed1c) returned 0x470108fd [0093.643] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.643] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.644] CreateCompatibleDC (hdc=0x470108fd) returned 0x7a0108c9 [0093.644] GetObjectType (h=0x470108fd) returned 0x3 [0093.644] CreateCompatibleBitmap (hdc=0x470108fd, cx=1, cy=1) returned 0x380508d6 [0093.644] GetDIBits (in: hdc=0x470108fd, hbm=0x380508d6, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7ec, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7ec) returned 1 [0093.644] GetDIBits (in: hdc=0x470108fd, hbm=0x380508d6, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7ec, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7ec) returned 1 [0093.645] DeleteObject (ho=0x380508d6) returned 1 [0093.645] CreateDIBSection (in: hdc=0x470108fd, lpbmi=0x119e83c, usage=0x0, ppvBits=0x119ed30, hSection=0x0, offset=0x0 | out: ppvBits=0x119ed30) returned 0x5e0508cf [0093.645] SelectObject (hdc=0x7a0108c9, h=0x5e0508cf) returned 0x185000f [0093.645] GdipCreateFromHDC (hdc=0x7a0108c9, graphics=0x119ed14) returned 0x0 [0093.645] GdipTranslateWorldTransform (graphics=0x56086d8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0093.645] GdipSetClipRectI (graphics=0x56086d8, x=0, y=0, width=73, height=13, combineMode=0x0) returned 0x0 [0093.645] GdipCreateMatrix (matrix=0x119ed7c) returned 0x0 [0093.645] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608d08) returned 0x0 [0093.645] GdipIsMatrixIdentity (matrix=0x5608d08, result=0x119ed94) returned 0x0 [0093.645] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.645] GdipGetMatrixElements (matrix=0x5608d08, matrixOut=0x15d6520) returned 0x0 [0093.645] LocalFree (hMem=0x15d6520) returned 0x0 [0093.645] GdipDeleteMatrix (matrix=0x5608d08) returned 0x0 [0093.645] GdipCreateRegion (region=0x119ed7c) returned 0x0 [0093.645] GdipGetClip (graphics=0x56086d8, region=0x56089b8) returned 0x0 [0093.645] GdipIsInfiniteRegion (region=0x56089b8, graphics=0x56086d8, result=0x119ed88) returned 0x0 [0093.646] GdipSaveGraphics (graphics=0x56086d8, state=0x119edb4) returned 0x0 [0093.646] GetWindowTextLengthW (hWnd=0x102b6) returned 14 [0093.646] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0093.646] GetSystemMetrics (nIndex=42) returned 0 [0093.646] GetWindowTextW (in: hWnd=0x102b6, lpString=0x119ecb0, nMaxCount=15 | out: lpString="Enter the key:") returned 14 [0093.646] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0xd, wParam=0xf, lParam=0x119ecb0) returned 0xe [0093.646] GetClientRect (in: hWnd=0x102b6, lpRect=0x119ed7c | out: lpRect=0x119ed7c) returned 1 [0093.646] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119eba8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8byt¬î\x19\x01èRí\x02\x18", lpUsedDefaultChar=0x0) returned 17 [0093.647] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0093.647] GdipCreateRegion (region=0x119ebb8) returned 0x0 [0093.647] GdipGetClip (graphics=0x56086d8, region=0x5608a48) returned 0x0 [0093.647] GdipCreateMatrix (matrix=0x119ebb8) returned 0x0 [0093.647] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5603678) returned 0x0 [0093.647] GdipIsMatrixIdentity (matrix=0x5603678, result=0x119ebd0) returned 0x0 [0093.647] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.647] GdipGetMatrixElements (matrix=0x5603678, matrixOut=0x15d6520) returned 0x0 [0093.647] LocalFree (hMem=0x15d6520) returned 0x0 [0093.647] GdipCombineRegionRegion (region=0x5608a48, region2=0x56089b8, combineMode=0x1) returned 0x0 [0093.647] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.647] GdipGetMatrixElements (matrix=0x5603678, matrixOut=0x15d6520) returned 0x0 [0093.647] LocalFree (hMem=0x15d6520) returned 0x0 [0093.647] GdipDeleteMatrix (matrix=0x5603678) returned 0x0 [0093.647] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ebfc) returned 0x0 [0093.647] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ebec) returned 0x0 [0093.647] GdipGetRegionHRgn (region=0x5608a48, graphics=0x56086d8, hRgn=0x119ebec) returned 0x0 [0093.647] GdipDeleteRegion (region=0x5608a48) returned 0x0 [0093.647] GdipGetDC (graphics=0x56086d8, hdc=0x119ec04) returned 0x0 [0093.647] GetCurrentObject (hdc=0x7a0108c9, type=0x1) returned 0x1b00017 [0093.647] GetCurrentObject (hdc=0x7a0108c9, type=0x2) returned 0x1900010 [0093.647] GetCurrentObject (hdc=0x7a0108c9, type=0x7) returned 0x5e0508cf [0093.647] GetCurrentObject (hdc=0x7a0108c9, type=0x6) returned 0x18a0048 [0093.647] SaveDC (hdc=0x7a0108c9) returned 1 [0093.648] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x56040894 [0093.648] GetClipRgn (hdc=0x7a0108c9, hrgn=0x56040894) returned 0 [0093.648] SelectClipRgn (hdc=0x7a0108c9, hrgn=0x4b0408c1) returned 2 [0093.648] DeleteObject (ho=0x56040894) returned 1 [0093.648] DeleteObject (ho=0x4b0408c1) returned 1 [0093.648] OffsetViewportOrgEx (in: hdc=0x7a0108c9, x=0, y=0, lppt=0x2ed56b8 | out: lppt=0x2ed56b8) returned 1 [0093.648] OffsetViewportOrgEx (in: hdc=0x7a0108c9, x=-6, y=-14, lppt=0x2ed56c8 | out: lppt=0x2ed56c8) returned 1 [0093.648] GetClientRect (in: hWnd=0x202a8, lpRect=0x119ec30 | out: lpRect=0x119ec30) returned 1 [0093.648] GetCurrentObject (hdc=0x7a0108c9, type=0x1) returned 0x1b00017 [0093.648] GetCurrentObject (hdc=0x7a0108c9, type=0x2) returned 0x1900010 [0093.648] GetCurrentObject (hdc=0x7a0108c9, type=0x7) returned 0x5e0508cf [0093.648] GetCurrentObject (hdc=0x7a0108c9, type=0x6) returned 0x18a0048 [0093.648] SaveDC (hdc=0x7a0108c9) returned 2 [0093.648] GetNearestColor (hdc=0x7a0108c9, color=0x0) returned 0x0 [0093.648] CreateSolidBrush (color=0x0) returned 0x3610086a [0093.648] FillRect (hDC=0x7a0108c9, lprc=0x119ead0, hbr=0x3610086a) returned 1 [0093.648] DeleteObject (ho=0x3610086a) returned 1 [0093.648] RestoreDC (hdc=0x7a0108c9, nSavedDC=-1) returned 1 [0093.648] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119eb30, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8byt¬î\x19\x01ÔVí\x02\x18", lpUsedDefaultChar=0x0) returned 17 [0093.649] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0093.663] SelectPalette (hdc=0x7a0108c9, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.663] GdipCreateFromHDC (hdc=0x7a0108c9, graphics=0x119ea54) returned 0x0 [0093.663] GdipSetPageUnit (graphics=0x5618e78, unit=0x2) returned 0x0 [0093.663] GdipCreateMatrix (matrix=0x119ea14) returned 0x0 [0093.663] GdipGetWorldTransform (graphics=0x5618e78, matrix=0x5608d08) returned 0x0 [0093.663] GdipIsMatrixIdentity (matrix=0x5608d08, result=0x119ea2c) returned 0x0 [0093.663] GdipDeleteMatrix (matrix=0x5608d08) returned 0x0 [0093.663] GdipCreateRegion (region=0x119ea14) returned 0x0 [0093.663] GdipGetClip (graphics=0x5618e78, region=0x5608ab8) returned 0x0 [0093.663] GdipIsInfiniteRegion (region=0x5608ab8, graphics=0x5618e78, result=0x119ea20) returned 0x0 [0093.663] GdipDeleteRegion (region=0x5608ab8) returned 0x0 [0093.663] GdipSaveGraphics (graphics=0x5618e78, state=0x119ea4c) returned 0x0 [0093.663] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119ea30) returned 0x0 [0093.663] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119ea30) returned 0x0 [0093.663] GdipCreateRegion (region=0x119e9d0) returned 0x0 [0093.663] GdipGetClip (graphics=0x5618e78, region=0x5618dd8) returned 0x0 [0093.663] GdipCreateMatrix (matrix=0x119e9d0) returned 0x0 [0093.663] GdipGetWorldTransform (graphics=0x5618e78, matrix=0x5603678) returned 0x0 [0093.664] GdipIsMatrixIdentity (matrix=0x5603678, result=0x119e9e8) returned 0x0 [0093.664] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.664] GdipGetMatrixElements (matrix=0x5603678, matrixOut=0x15d6520) returned 0x0 [0093.664] LocalFree (hMem=0x15d6520) returned 0x0 [0093.664] GdipDeleteMatrix (matrix=0x5603678) returned 0x0 [0093.664] GdipIsInfiniteRegion (region=0x5618dd8, graphics=0x5618e78, result=0x119ea14) returned 0x0 [0093.664] GdipDeleteRegion (region=0x5618dd8) returned 0x0 [0093.664] GdipGetDC (graphics=0x5618e78, hdc=0x119ea1c) returned 0x0 [0093.664] GetCurrentObject (hdc=0x7a0108c9, type=0x1) returned 0x1b00017 [0093.664] GetCurrentObject (hdc=0x7a0108c9, type=0x2) returned 0x1900010 [0093.664] GetCurrentObject (hdc=0x7a0108c9, type=0x7) returned 0x5e0508cf [0093.664] GetCurrentObject (hdc=0x7a0108c9, type=0x6) returned 0x18a0048 [0093.664] SaveDC (hdc=0x7a0108c9) returned 2 [0093.664] OffsetViewportOrgEx (in: hdc=0x7a0108c9, x=0, y=0, lppt=0x2ed5ad4 | out: lppt=0x2ed5ad4) returned 1 [0093.664] GetWindowTextLengthW (hWnd=0x202a8) returned 7 [0093.664] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0093.664] GetSystemMetrics (nIndex=42) returned 0 [0093.664] GetWindowTextW (in: hWnd=0x202a8, lpString=0x119e99c, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0093.664] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xd, wParam=0x8, lParam=0x119e99c) returned 0x7 [0093.664] GetCurrentObject (hdc=0x7a0108c9, type=0x6) returned 0x18a0048 [0093.664] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e8fc | out: pv=0x119e8fc) returned 92 [0093.664] SelectObject (hdc=0x7a0108c9, h=0xb20a08b8) returned 0x18a0048 [0093.670] DrawTextExW (in: hdc=0x7a0108c9, lpchText="Decrypt", cchText=7, lprc=0x119ea38, format=0x102410, lpdtp=0x2ed5b60 | out: lpchText="Decrypt", lprc=0x119ea38) returned 13 [0093.670] GetWindowTextLengthW (hWnd=0x202a8) returned 7 [0093.670] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0093.670] GetSystemMetrics (nIndex=42) returned 0 [0093.670] GetWindowTextW (in: hWnd=0x202a8, lpString=0x119e99c, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0093.670] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xd, wParam=0x8, lParam=0x119e99c) returned 0x7 [0093.670] GetTextAlign (hdc=0x7a0108c9) returned 0x0 [0093.670] GetTextColor (hdc=0x7a0108c9) returned 0x0 [0093.670] SetTextColor (hdc=0x7a0108c9, color=0xf0f0f0) returned 0x0 [0093.670] GetCurrentObject (hdc=0x7a0108c9, type=0x6) returned 0xb20a08b8 [0093.670] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119e7a8 | out: pv=0x119e7a8) returned 92 [0093.670] GetBkMode (hdc=0x7a0108c9) returned 2 [0093.670] SetBkMode (hdc=0x7a0108c9, mode=1) returned 2 [0093.670] DrawTextExW (in: hdc=0x7a0108c9, lpchText="Decrypt", cchText=7, lprc=0x119e9dc, format=0x102010, lpdtp=0x2ed5da4 | out: lpchText="Decrypt", lprc=0x119e9dc) returned 13 [0093.671] RestoreDC (hdc=0x7a0108c9, nSavedDC=-1) returned 1 [0093.671] GdipReleaseDC (graphics=0x5618e78, hdc=0x7a0108c9) returned 0x0 [0093.671] GdipDrawLineI (graphics=0x5618e78, pen=0x5608c08, x1=1, y1=6, x2=1, y2=59) returned 0x0 [0093.671] GdipDrawLineI (graphics=0x5618e78, pen=0x5618d48, x1=0, y1=6, x2=0, y2=58) returned 0x0 [0093.671] GdipDrawLineI (graphics=0x5618e78, pen=0x5608c08, x1=0, y1=59, x2=711, y2=59) returned 0x0 [0093.671] GdipDrawLineI (graphics=0x5618e78, pen=0x5618d48, x1=0, y1=58, x2=710, y2=58) returned 0x0 [0093.671] GdipDrawLineI (graphics=0x5618e78, pen=0x5618d48, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0093.671] GdipDrawLineI (graphics=0x5618e78, pen=0x5608c08, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0093.671] GdipDrawLineI (graphics=0x5618e78, pen=0x5618d48, x1=52, y1=5, x2=709, y2=5) returned 0x0 [0093.671] GdipDrawLineI (graphics=0x5618e78, pen=0x5608c08, x1=52, y1=6, x2=710, y2=6) returned 0x0 [0093.671] GdipDrawLineI (graphics=0x5618e78, pen=0x5608c08, x1=710, y1=5, x2=710, y2=59) returned 0x0 [0093.671] GdipDrawLineI (graphics=0x5618e78, pen=0x5618d48, x1=709, y1=6, x2=709, y2=58) returned 0x0 [0093.671] GdipDeletePen (pen=0x5608c08) returned 0x0 [0093.671] GdipDeletePen (pen=0x5618d48) returned 0x0 [0093.671] GdipDeleteGraphics (graphics=0x5618e78) returned 0x0 [0093.671] SelectPalette (hdc=0x7a0108c9, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.671] RestoreDC (hdc=0x7a0108c9, nSavedDC=-1) returned 1 [0093.671] GdipReleaseDC (graphics=0x56086d8, hdc=0x7a0108c9) returned 0x0 [0093.672] GdipRestoreGraphics (graphics=0x56086d8, state=0xfda40dbd) returned 0x0 [0093.672] GdipDeleteRegion (region=0x56089b8) returned 0x0 [0093.672] GetWindowTextLengthW (hWnd=0x102b6) returned 14 [0093.672] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0093.672] GetSystemMetrics (nIndex=42) returned 0 [0093.672] GetWindowTextW (in: hWnd=0x102b6, lpString=0x119ecb0, nMaxCount=15 | out: lpString="Enter the key:") returned 14 [0093.672] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0xd, wParam=0xf, lParam=0x119ecb0) returned 0xe [0093.672] GdipGetDC (graphics=0x56086d8, hdc=0x119ec38) returned 0x0 [0093.672] GetCurrentObject (hdc=0x7a0108c9, type=0x1) returned 0x1b00017 [0093.672] GetCurrentObject (hdc=0x7a0108c9, type=0x2) returned 0x1900010 [0093.672] GetCurrentObject (hdc=0x7a0108c9, type=0x7) returned 0x5e0508cf [0093.672] GetCurrentObject (hdc=0x7a0108c9, type=0x6) returned 0x18a0048 [0093.672] SaveDC (hdc=0x7a0108c9) returned 1 [0093.672] GetNearestColor (hdc=0x7a0108c9, color=0xff) returned 0xff [0093.672] RestoreDC (hdc=0x7a0108c9, nSavedDC=-1) returned 1 [0093.672] GdipReleaseDC (graphics=0x56086d8, hdc=0x7a0108c9) returned 0x0 [0093.673] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.673] AdjustWindowRectEx (in: lpRect=0x119eb5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119eb5c) returned 1 [0093.673] GdipGetTextRenderingHint (graphics=0x56086d8, mode=0x119ebd8) returned 0x0 [0093.673] GdipGetDC (graphics=0x56086d8, hdc=0x119ebc4) returned 0x0 [0093.673] GetCurrentObject (hdc=0x7a0108c9, type=0x1) returned 0x1b00017 [0093.673] GetCurrentObject (hdc=0x7a0108c9, type=0x2) returned 0x1900010 [0093.673] GetCurrentObject (hdc=0x7a0108c9, type=0x7) returned 0x5e0508cf [0093.673] GetCurrentObject (hdc=0x7a0108c9, type=0x6) returned 0x18a0048 [0093.673] SaveDC (hdc=0x7a0108c9) returned 1 [0093.673] GetTextAlign (hdc=0x7a0108c9) returned 0x0 [0093.673] GetTextColor (hdc=0x7a0108c9) returned 0x0 [0093.673] SetTextColor (hdc=0x7a0108c9, color=0xff) returned 0x0 [0093.673] GetCurrentObject (hdc=0x7a0108c9, type=0x6) returned 0x18a0048 [0093.673] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e924 | out: pv=0x119e924) returned 92 [0093.673] SelectObject (hdc=0x7a0108c9, h=0xb20a08b8) returned 0x18a0048 [0093.673] GetBkMode (hdc=0x7a0108c9) returned 2 [0093.673] SetBkMode (hdc=0x7a0108c9, mode=1) returned 2 [0093.673] DrawTextExW (in: hdc=0x7a0108c9, lpchText="Enter the key:", cchText=14, lprc=0x119eb58, format=0x100000, lpdtp=0x2ed62a4 | out: lpchText="Enter the key:", lprc=0x119eb58) returned 13 [0093.674] RestoreDC (hdc=0x7a0108c9, nSavedDC=-1) returned 1 [0093.674] GdipReleaseDC (graphics=0x56086d8, hdc=0x7a0108c9) returned 0x0 [0093.674] GdipGetDC (graphics=0x56086d8, hdc=0x119ed74) returned 0x0 [0093.674] BitBlt (hdc=0x470108fd, x=0, y=0, cx=73, cy=13, hdcSrc=0x7a0108c9, x1=0, y1=0, rop=0xcc0020) returned 1 [0093.674] GdipReleaseDC (graphics=0x56086d8, hdc=0x7a0108c9) returned 0x0 [0093.674] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.674] SelectObject (hdc=0x7a0108c9, h=0x185000f) returned 0x5e0508cf [0093.675] DeleteDC (hdc=0x7a0108c9) returned 1 [0093.675] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0093.675] EndPaint (hWnd=0x102b6, lpPaint=0x119ed18) returned 1 [0093.675] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.675] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0093.675] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0093.675] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0093.675] IsWindowUnicode (hWnd=0x30258) returned 1 [0093.675] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.675] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.675] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.675] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xc0a7, wParam=0x0, lParam=0x0) returned 0x0 [0093.675] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.676] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x1640343) returned 0x1 [0093.676] IsWindowUnicode (hWnd=0x30258) returned 1 [0093.676] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.676] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x1640343) returned 0x1 [0093.676] SetCursor (hCursor=0x10003) returned 0x10003 [0093.676] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.676] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.676] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x200, wParam=0x0, lParam=0xe202d8) returned 0x0 [0093.676] GetKeyState (nVirtKey=1) returned 0 [0093.676] GetKeyState (nVirtKey=2) returned 1 [0093.676] GetKeyState (nVirtKey=4) returned 0 [0093.676] GetKeyState (nVirtKey=5) returned 0 [0093.676] GetKeyState (nVirtKey=6) returned 0 [0093.676] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.676] IsWindowUnicode (hWnd=0x102b8) returned 1 [0093.676] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.676] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.676] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0093.676] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0093.676] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.676] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x14, wParam=0x50108bd, lParam=0x0) returned 0x1 [0093.676] SetTextColor (hdc=0x50108bd, color=0x0) returned 0x0 [0093.677] SetBkColor (hdc=0x50108bd, color=0xffffff) returned 0xffffff [0093.677] SetTextColor (hdc=0x50108bd, color=0x0) returned 0x0 [0093.677] SetBkColor (hdc=0x50108bd, color=0xffffff) returned 0xffffff [0093.694] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.694] IsWindowUnicode (hWnd=0x102ba) returned 1 [0093.694] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.694] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.694] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.694] BeginPaint (in: hWnd=0x102ba, lpPaint=0x119ed4c | out: lpPaint=0x119ed4c) returned 0xe010919 [0093.694] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.694] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.694] GetWindowTextLengthW (hWnd=0x102ba) returned 22 [0093.694] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0093.694] GetSystemMetrics (nIndex=42) returned 0 [0093.694] GetWindowTextW (in: hWnd=0x102ba, lpString=0x119ecd0, nMaxCount=23 | out: lpString="How to buy your file ?") returned 22 [0093.694] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xd, wParam=0x17, lParam=0x119ecd0) returned 0x16 [0093.694] GetClientRect (in: hWnd=0x102ba, lpRect=0x119edac | out: lpRect=0x119edac) returned 1 [0093.694] GetCurrentObject (hdc=0xe010919, type=0x1) returned 0x1b00017 [0093.694] GetCurrentObject (hdc=0xe010919, type=0x2) returned 0x1900010 [0093.694] GetCurrentObject (hdc=0xe010919, type=0x7) returned 0xf0506d3 [0093.694] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0093.694] SaveDC (hdc=0xe010919) returned 1 [0093.694] GetNearestColor (hdc=0xe010919, color=0x0) returned 0x0 [0093.694] CreateSolidBrush (color=0x0) returned 0x3710086a [0093.694] FillRect (hDC=0xe010919, lprc=0x119ec4c, hbr=0x3710086a) returned 1 [0093.694] DeleteObject (ho=0x3710086a) returned 1 [0093.694] RestoreDC (hdc=0xe010919, nSavedDC=-1) returned 1 [0093.694] GetWindowTextLengthW (hWnd=0x102ba) returned 22 [0093.695] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0093.695] GetSystemMetrics (nIndex=42) returned 0 [0093.695] GetWindowTextW (in: hWnd=0x102ba, lpString=0x119ecd0, nMaxCount=23 | out: lpString="How to buy your file ?") returned 22 [0093.695] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xd, wParam=0x17, lParam=0x119ecd0) returned 0x16 [0093.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119ecac, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8bytÜî\x19\x01\x04cí\x02\x18", lpUsedDefaultChar=0x0) returned 17 [0093.695] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0093.695] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x4b08085a [0093.695] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119ebd0) returned 0x0 [0093.695] GdipSetPageUnit (graphics=0x5618dd8, unit=0x2) returned 0x0 [0093.695] GdipCreateMatrix (matrix=0x119eb90) returned 0x0 [0093.695] GdipGetWorldTransform (graphics=0x5618dd8, matrix=0x5603418) returned 0x0 [0093.695] GdipIsMatrixIdentity (matrix=0x5603418, result=0x119eba8) returned 0x0 [0093.695] GdipDeleteMatrix (matrix=0x5603418) returned 0x0 [0093.695] GdipCreateRegion (region=0x119eb90) returned 0x0 [0093.695] GdipGetClip (graphics=0x5618dd8, region=0x5603448) returned 0x0 [0093.695] GdipIsInfiniteRegion (region=0x5603448, graphics=0x5618dd8, result=0x119eb9c) returned 0x0 [0093.695] GdipDeleteRegion (region=0x5603448) returned 0x0 [0093.695] GdipSaveGraphics (graphics=0x5618dd8, state=0x119ebc8) returned 0x0 [0093.695] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119ebac) returned 0x0 [0093.695] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119ebac) returned 0x0 [0093.702] GdipCreateRegion (region=0x119eb4c) returned 0x0 [0093.702] GdipGetClip (graphics=0x5618dd8, region=0x5608898) returned 0x0 [0093.702] GdipCreateMatrix (matrix=0x119eb4c) returned 0x0 [0093.702] GdipGetWorldTransform (graphics=0x5618dd8, matrix=0x5608928) returned 0x0 [0093.702] GdipIsMatrixIdentity (matrix=0x5608928, result=0x119eb64) returned 0x0 [0093.702] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.702] GdipGetMatrixElements (matrix=0x5608928, matrixOut=0x15d6520) returned 0x0 [0093.703] LocalFree (hMem=0x15d6520) returned 0x0 [0093.703] GdipDeleteMatrix (matrix=0x5608928) returned 0x0 [0093.703] GdipIsInfiniteRegion (region=0x5608898, graphics=0x5618dd8, result=0x119eb90) returned 0x0 [0093.703] GdipDeleteRegion (region=0x5608898) returned 0x0 [0093.703] GdipGetDC (graphics=0x5618dd8, hdc=0x119eb98) returned 0x0 [0093.703] GetCurrentObject (hdc=0xe010919, type=0x1) returned 0x1b00017 [0093.703] GetCurrentObject (hdc=0xe010919, type=0x2) returned 0x1900010 [0093.703] GetCurrentObject (hdc=0xe010919, type=0x7) returned 0xf0506d3 [0093.703] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0093.703] SaveDC (hdc=0xe010919) returned 1 [0093.703] OffsetViewportOrgEx (in: hdc=0xe010919, x=0, y=0, lppt=0x2ed6994 | out: lppt=0x2ed6994) returned 1 [0093.703] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0093.703] GetObjectW (in: h=0x18a0048, c=92, pv=0x119ea78 | out: pv=0x119ea78) returned 92 [0093.703] SelectObject (hdc=0xe010919, h=0xb20a08b8) returned 0x18a0048 [0093.703] DrawTextExW (in: hdc=0xe010919, lpchText="How to buy your file ?", cchText=22, lprc=0x119ebb4, format=0x102410, lpdtp=0x2ed69a4 | out: lpchText="How to buy your file ?", lprc=0x119ebb4) returned 13 [0093.703] GetTextAlign (hdc=0xe010919) returned 0x0 [0093.703] GetTextColor (hdc=0xe010919) returned 0x0 [0093.703] SetTextColor (hdc=0xe010919, color=0xf0f0f0) returned 0x0 [0093.703] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0xb20a08b8 [0093.703] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119e924 | out: pv=0x119e924) returned 92 [0093.703] GetBkMode (hdc=0xe010919) returned 2 [0093.703] SetBkMode (hdc=0xe010919, mode=1) returned 2 [0093.703] DrawTextExW (in: hdc=0xe010919, lpchText="How to buy your file ?", cchText=22, lprc=0x119eb58, format=0x102010, lpdtp=0x2ed6b6c | out: lpchText="How to buy your file ?", lprc=0x119eb58) returned 13 [0093.703] RestoreDC (hdc=0xe010919, nSavedDC=-1) returned 1 [0093.704] GdipReleaseDC (graphics=0x5618dd8, hdc=0xe010919) returned 0x0 [0093.704] GdipDrawLineI (graphics=0x5618dd8, pen=0x5618d48, x1=1, y1=6, x2=1, y2=93) returned 0x0 [0093.704] GdipDrawLineI (graphics=0x5618dd8, pen=0x56086d8, x1=0, y1=6, x2=0, y2=92) returned 0x0 [0093.704] GdipDrawLineI (graphics=0x5618dd8, pen=0x5618d48, x1=0, y1=93, x2=340, y2=93) returned 0x0 [0093.704] GdipDrawLineI (graphics=0x5618dd8, pen=0x56086d8, x1=0, y1=92, x2=339, y2=92) returned 0x0 [0093.705] GdipDrawLineI (graphics=0x5618dd8, pen=0x56086d8, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0093.705] GdipDrawLineI (graphics=0x5618dd8, pen=0x5618d48, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0093.705] GdipDrawLineI (graphics=0x5618dd8, pen=0x56086d8, x1=117, y1=5, x2=338, y2=5) returned 0x0 [0093.705] GdipDrawLineI (graphics=0x5618dd8, pen=0x5618d48, x1=117, y1=6, x2=339, y2=6) returned 0x0 [0093.705] GdipDrawLineI (graphics=0x5618dd8, pen=0x5618d48, x1=339, y1=5, x2=339, y2=93) returned 0x0 [0093.705] GdipDrawLineI (graphics=0x5618dd8, pen=0x56086d8, x1=338, y1=6, x2=338, y2=92) returned 0x0 [0093.706] GdipDeletePen (pen=0x5618d48) returned 0x0 [0093.706] GdipDeletePen (pen=0x56086d8) returned 0x0 [0093.706] GdipDeleteGraphics (graphics=0x5618dd8) returned 0x0 [0093.706] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=0) returned 0x4b08085a [0093.706] SelectPalette (hdc=0xe010919, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.706] EndPaint (hWnd=0x102ba, lpPaint=0x119ed48) returned 1 [0093.706] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.706] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x1630343) returned 0x1 [0093.706] IsWindowUnicode (hWnd=0x30258) returned 1 [0093.706] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.706] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x1630343) returned 0x1 [0093.706] SetCursor (hCursor=0x10003) returned 0x10003 [0093.706] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.706] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.706] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x200, wParam=0x0, lParam=0xe102d8) returned 0x0 [0093.706] GetKeyState (nVirtKey=1) returned 0 [0093.706] GetKeyState (nVirtKey=2) returned 1 [0093.706] GetKeyState (nVirtKey=4) returned 0 [0093.706] GetKeyState (nVirtKey=5) returned 0 [0093.706] GetKeyState (nVirtKey=6) returned 0 [0093.706] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.706] IsWindowUnicode (hWnd=0x102bc) returned 1 [0093.706] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.706] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.706] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.706] BeginPaint (in: hWnd=0x102bc, lpPaint=0x119ed10 | out: lpPaint=0x119ed10) returned 0x50108bd [0093.706] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.707] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x14, wParam=0x50108bd, lParam=0x0) returned 0x1 [0093.707] GetStockObject (i=5) returned 0x1900015 [0093.707] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.707] CreateCompatibleDC (hdc=0x50108bd) returned 0x350108a0 [0093.707] DeleteObject (ho=0x5e0508cf) returned 1 [0093.707] GetObjectType (h=0x50108bd) returned 0x3 [0093.707] CreateCompatibleBitmap (hdc=0x50108bd, cx=1, cy=1) returned 0x3a0508d6 [0093.707] GetDIBits (in: hdc=0x50108bd, hbm=0x3a0508d6, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7e0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7e0) returned 1 [0093.707] GetDIBits (in: hdc=0x50108bd, hbm=0x3a0508d6, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7e0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7e0) returned 1 [0093.707] DeleteObject (ho=0x3a0508d6) returned 1 [0093.707] CreateDIBSection (in: hdc=0x50108bd, lpbmi=0x119e830, usage=0x0, ppvBits=0x119ed24, hSection=0x0, offset=0x0 | out: ppvBits=0x119ed24) returned 0x5f0508cf [0093.707] SelectObject (hdc=0x350108a0, h=0x5f0508cf) returned 0x185000f [0093.707] GdipCreateFromHDC (hdc=0x350108a0, graphics=0x119ed08) returned 0x0 [0093.707] GdipTranslateWorldTransform (graphics=0x5608958, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0093.707] GdipSetClipRectI (graphics=0x5608958, x=0, y=0, width=26, height=21, combineMode=0x0) returned 0x0 [0093.707] GdipCreateMatrix (matrix=0x119ed70) returned 0x0 [0093.707] GdipGetWorldTransform (graphics=0x5608958, matrix=0x5608c38) returned 0x0 [0093.707] GdipIsMatrixIdentity (matrix=0x5608c38, result=0x119ed88) returned 0x0 [0093.707] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0093.707] GdipGetMatrixElements (matrix=0x5608c38, matrixOut=0x15d6050) returned 0x0 [0093.707] LocalFree (hMem=0x15d6050) returned 0x0 [0093.707] GdipDeleteMatrix (matrix=0x5608c38) returned 0x0 [0093.708] GdipCreateRegion (region=0x119ed70) returned 0x0 [0093.708] GdipGetClip (graphics=0x5608958, region=0x5608c68) returned 0x0 [0093.708] GdipIsInfiniteRegion (region=0x5608c68, graphics=0x5608958, result=0x119ed7c) returned 0x0 [0093.708] GdipSaveGraphics (graphics=0x5608958, state=0x119eda8) returned 0x0 [0093.708] GdipRestoreGraphics (graphics=0x5608958, state=0xfd9e0dbd) returned 0x0 [0093.708] GdipDeleteRegion (region=0x5608c68) returned 0x0 [0093.709] SystemParametersInfoW (in: uiAction=0x42, uiParam=0xc, pvParam=0x119eb4c, fWinIni=0x0 | out: pvParam=0x119eb4c) returned 1 [0093.710] GdipGetDC (graphics=0x5608958, hdc=0x119eaf8) returned 0x0 [0093.710] GetCurrentObject (hdc=0x350108a0, type=0x1) returned 0x1b00017 [0093.710] GetCurrentObject (hdc=0x350108a0, type=0x2) returned 0x1900010 [0093.710] GetCurrentObject (hdc=0x350108a0, type=0x7) returned 0x5f0508cf [0093.710] GetCurrentObject (hdc=0x350108a0, type=0x6) returned 0x18a0048 [0093.710] SaveDC (hdc=0x350108a0) returned 1 [0093.710] GetNearestColor (hdc=0x350108a0, color=0xc0) returned 0xc0 [0093.710] GetNearestColor (hdc=0x350108a0, color=0x40) returned 0x40 [0093.710] GetNearestColor (hdc=0x350108a0, color=0x0) returned 0x0 [0093.710] GetNearestColor (hdc=0x350108a0, color=0x5656e5) returned 0x5656e5 [0093.711] GetNearestColor (hdc=0x350108a0, color=0xf0f0f0) returned 0xf0f0f0 [0093.711] GetNearestColor (hdc=0x350108a0, color=0x6060ff) returned 0x6060ff [0093.711] GetNearestColor (hdc=0x350108a0, color=0x5656e5) returned 0x5656e5 [0093.711] GetNearestColor (hdc=0x350108a0, color=0xe6) returned 0xe6 [0093.711] GetNearestColor (hdc=0x350108a0, color=0xf0f0f0) returned 0xf0f0f0 [0093.711] RestoreDC (hdc=0x350108a0, nSavedDC=-1) returned 1 [0093.711] GdipReleaseDC (graphics=0x5608958, hdc=0x350108a0) returned 0x0 [0093.723] DrawTextExW (in: hdc=0x490108ba, lpchText="?", cchText=1, lprc=0x119e99c, format=0x102415, lpdtp=0x2ed8190 | out: lpchText="?", lprc=0x119e99c) returned 13 [0093.724] GdipCreateRegion (region=0x119e9f0) returned 0x0 [0093.724] GdipGetClip (graphics=0x5608958, region=0x5608c68) returned 0x0 [0093.724] GdipCreateMatrix (matrix=0x119e9f0) returned 0x0 [0093.724] GdipGetWorldTransform (graphics=0x5608958, matrix=0x5608cf8) returned 0x0 [0093.724] GdipIsMatrixIdentity (matrix=0x5608cf8, result=0x119ea08) returned 0x0 [0093.724] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0093.724] GdipGetMatrixElements (matrix=0x5608cf8, matrixOut=0x15d6050) returned 0x0 [0093.724] LocalFree (hMem=0x15d6050) returned 0x0 [0093.724] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.724] GdipGetMatrixElements (matrix=0x5608cf8, matrixOut=0x15d6520) returned 0x0 [0093.724] LocalFree (hMem=0x15d6520) returned 0x0 [0093.724] GdipDeleteMatrix (matrix=0x5608cf8) returned 0x0 [0093.724] GdipIsInfiniteRegion (region=0x5608c68, graphics=0x5608958, result=0x119ea34) returned 0x0 [0093.724] GdipIsInfiniteRegion (region=0x5608c68, graphics=0x5608958, result=0x119ea24) returned 0x0 [0093.724] GdipGetRegionHRgn (region=0x5608c68, graphics=0x5608958, hRgn=0x119ea24) returned 0x0 [0093.724] GdipDeleteRegion (region=0x5608c68) returned 0x0 [0093.724] GdipGetDC (graphics=0x5608958, hdc=0x119ea3c) returned 0x0 [0093.724] GetCurrentObject (hdc=0x350108a0, type=0x1) returned 0x1b00017 [0093.724] GetCurrentObject (hdc=0x350108a0, type=0x2) returned 0x1900010 [0093.724] GetCurrentObject (hdc=0x350108a0, type=0x7) returned 0x5f0508cf [0093.724] GetCurrentObject (hdc=0x350108a0, type=0x6) returned 0x18a0048 [0093.724] SaveDC (hdc=0x350108a0) returned 1 [0093.724] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c0408c1 [0093.724] GetClipRgn (hdc=0x350108a0, hrgn=0x4c0408c1) returned 0 [0093.724] SelectClipRgn (hdc=0x350108a0, hrgn=0x5d040894) returned 2 [0093.724] DeleteObject (ho=0x4c0408c1) returned 1 [0093.724] DeleteObject (ho=0x5d040894) returned 1 [0093.725] OffsetViewportOrgEx (in: hdc=0x350108a0, x=0, y=0, lppt=0x2ed8388 | out: lppt=0x2ed8388) returned 1 [0093.725] GetNearestColor (hdc=0x350108a0, color=0xc0) returned 0xc0 [0093.725] CreateSolidBrush (color=0xc0) returned 0x3810086a [0093.725] FillRect (hDC=0x350108a0, lprc=0x119ea40, hbr=0x3810086a) returned 1 [0093.725] DeleteObject (ho=0x3810086a) returned 1 [0093.725] RestoreDC (hdc=0x350108a0, nSavedDC=-1) returned 1 [0093.725] GdipReleaseDC (graphics=0x5608958, hdc=0x350108a0) returned 0x0 [0093.725] GdipGetTextRenderingHint (graphics=0x5608958, mode=0x119eabc) returned 0x0 [0093.725] GdipGetDC (graphics=0x5608958, hdc=0x119eaa8) returned 0x0 [0093.725] GetCurrentObject (hdc=0x350108a0, type=0x1) returned 0x1b00017 [0093.725] GetCurrentObject (hdc=0x350108a0, type=0x2) returned 0x1900010 [0093.725] GetCurrentObject (hdc=0x350108a0, type=0x7) returned 0x5f0508cf [0093.725] GetCurrentObject (hdc=0x350108a0, type=0x6) returned 0x18a0048 [0093.726] SaveDC (hdc=0x350108a0) returned 1 [0093.726] GetTextAlign (hdc=0x350108a0) returned 0x0 [0093.726] GetTextColor (hdc=0x350108a0) returned 0x0 [0093.726] SetTextColor (hdc=0x350108a0, color=0xf0f0f0) returned 0x0 [0093.726] GetCurrentObject (hdc=0x350108a0, type=0x6) returned 0x18a0048 [0093.726] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e808 | out: pv=0x119e808) returned 92 [0093.726] SelectObject (hdc=0x350108a0, h=0xb20a08b8) returned 0x18a0048 [0093.726] GetBkMode (hdc=0x350108a0) returned 2 [0093.726] SetBkMode (hdc=0x350108a0, mode=1) returned 2 [0093.726] DrawTextExW (in: hdc=0x350108a0, lpchText="?", cchText=1, lprc=0x119e8ec, format=0x102415, lpdtp=0x2ed8648 | out: lpchText="?", lprc=0x119e8ec) returned 13 [0093.726] DrawTextExW (in: hdc=0x350108a0, lpchText="?", cchText=1, lprc=0x119ea3c, format=0x102015, lpdtp=0x2ed8648 | out: lpchText="?", lprc=0x119ea3c) returned 13 [0093.726] RestoreDC (hdc=0x350108a0, nSavedDC=-1) returned 1 [0093.726] GdipReleaseDC (graphics=0x5608958, hdc=0x350108a0) returned 0x0 [0093.726] GetFocus () returned 0x102d4 [0093.726] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb20) returned 0x0 [0093.726] GdipDrawRectangleI (graphics=0x5608958, pen=0x56086d8, x=0, y=0, width=25, height=20) returned 0x0 [0093.726] GdipDeletePen (pen=0x56086d8) returned 0x0 [0093.726] GdipGetDC (graphics=0x5608958, hdc=0x119ed68) returned 0x0 [0093.727] BitBlt (hdc=0x50108bd, x=0, y=0, cx=26, cy=21, hdcSrc=0x350108a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0093.727] GdipReleaseDC (graphics=0x5608958, hdc=0x350108a0) returned 0x0 [0093.727] SelectPalette (hdc=0x50108bd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.727] SelectObject (hdc=0x350108a0, h=0x185000f) returned 0x5f0508cf [0093.727] DeleteDC (hdc=0x350108a0) returned 1 [0093.732] GdipDeleteGraphics (graphics=0x5608958) returned 0x0 [0093.732] EndPaint (hWnd=0x102bc, lpPaint=0x119ed0c) returned 1 [0093.732] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.732] IsWindowUnicode (hWnd=0x102be) returned 1 [0093.732] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.732] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.732] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.732] BeginPaint (in: hWnd=0x102be, lpPaint=0x119ed14 | out: lpPaint=0x119ed14) returned 0xe010919 [0093.732] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.733] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.733] CreateCompatibleDC (hdc=0xe010919) returned 0x380108a0 [0093.733] DeleteObject (ho=0x5f0508cf) returned 1 [0093.733] GetObjectType (h=0xe010919) returned 0x3 [0093.733] CreateCompatibleBitmap (hdc=0xe010919, cx=1, cy=1) returned 0x3c0508d6 [0093.733] GetDIBits (in: hdc=0xe010919, hbm=0x3c0508d6, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7e4, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7e4) returned 1 [0093.733] GetDIBits (in: hdc=0xe010919, hbm=0x3c0508d6, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7e4, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7e4) returned 1 [0093.733] DeleteObject (ho=0x3c0508d6) returned 1 [0093.733] CreateDIBSection (in: hdc=0xe010919, lpbmi=0x119e834, usage=0x0, ppvBits=0x119ed28, hSection=0x0, offset=0x0 | out: ppvBits=0x119ed28) returned 0x600508cf [0093.733] SelectObject (hdc=0x380108a0, h=0x600508cf) returned 0x185000f [0093.733] GdipCreateFromHDC (hdc=0x380108a0, graphics=0x119ed0c) returned 0x0 [0093.733] GdipTranslateWorldTransform (graphics=0x5608898, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0093.733] GdipSetClipRectI (graphics=0x5608898, x=0, y=0, width=243, height=13, combineMode=0x0) returned 0x0 [0093.733] GdipCreateMatrix (matrix=0x119ed74) returned 0x0 [0093.733] GdipGetWorldTransform (graphics=0x5608898, matrix=0x5608b78) returned 0x0 [0093.733] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119ed8c) returned 0x0 [0093.733] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.733] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x15d6520) returned 0x0 [0093.733] LocalFree (hMem=0x15d6520) returned 0x0 [0093.733] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0093.733] GdipCreateRegion (region=0x119ed74) returned 0x0 [0093.734] GdipGetClip (graphics=0x5608898, region=0x5608ba8) returned 0x0 [0093.734] GdipIsInfiniteRegion (region=0x5608ba8, graphics=0x5608898, result=0x119ed80) returned 0x0 [0093.734] GdipSaveGraphics (graphics=0x5608898, state=0x119edac) returned 0x0 [0093.734] GetWindowTextLengthW (hWnd=0x102be) returned 43 [0093.734] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2b [0093.734] GetSystemMetrics (nIndex=42) returned 0 [0093.734] GetWindowTextW (in: hWnd=0x102be, lpString=0x119ec70, nMaxCount=44 | out: lpString="https://www.youtube.com/watch?v=Ji9IwPId5Uk") returned 43 [0093.734] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0xd, wParam=0x2c, lParam=0x119ec70) returned 0x2b [0093.734] GdipRestoreGraphics (graphics=0x5608898, state=0xfd9c0dbd) returned 0x0 [0093.734] GdipDeleteRegion (region=0x5608ba8) returned 0x0 [0093.734] GetWindowTextLengthW (hWnd=0x102be) returned 43 [0093.734] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2b [0093.734] GetSystemMetrics (nIndex=42) returned 0 [0093.734] GetWindowTextW (in: hWnd=0x102be, lpString=0x119ec70, nMaxCount=44 | out: lpString="https://www.youtube.com/watch?v=Ji9IwPId5Uk") returned 43 [0093.734] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0xd, wParam=0x2c, lParam=0x119ec70) returned 0x2b [0093.735] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2ed9b2c) returned 0x0 [0093.737] GdipSetStringFormatAlign (format=0x5608ba8, align=0x0) returned 0x0 [0093.737] GdipSetStringFormatLineAlign (format=0x5608ba8, align=0x0) returned 0x0 [0093.738] GdipSetStringFormatHotkeyPrefix (format=0x5608ba8, hotkeyPrefix=2) returned 0x0 [0093.738] GdipGetStringFormatFlags (format=0x5608ba8, flags=0x119eafc) returned 0x0 [0093.738] GdipSetStringFormatFlags (format=0x5608ba8, flags=2048) returned 0x0 [0093.741] CoTaskMemAlloc (cb=0x10) returned 0x16233d8 [0093.742] GdipSetStringFormatMeasurableCharacterRanges (format=0x5608ba8, rangeCount=2, ranges=0x16233d8) returned 0x0 [0093.752] CoTaskMemFree (pv=0x16233d8) [0093.752] GdipCreateFont (fontFamily=0x55f5350, emSize=0x41040000, style=4, unit=0x3, font=0x2ed9fc8) returned 0x0 [0093.752] GdipGetFontSize (font=0x5608c00, size=0x2ed9fcc) returned 0x0 [0093.753] GdipGetFamilyName (in: family=0x55f5350, name=0x119e9cc, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0093.753] GetDeviceCaps (hdc=0x490108ba, index=90) returned 96 [0093.753] CoTaskMemAlloc (cb=0x5c) returned 0x15ec728 [0093.753] CreateFontIndirectW (lplf=0x15ec728) returned 0x860a0555 [0093.753] CoTaskMemFree (pv=0x15ec728) [0093.753] GetObjectW (in: h=0x860a0555, c=92, pv=0x119e994 | out: pv=0x119e994) returned 92 [0093.753] SelectObject (hdc=0x490108ba, h=0x860a0555) returned 0x400a08d8 [0093.753] DeleteObject (ho=0x400a08d8) returned 1 [0093.753] GetMapMode (hdc=0x490108ba) returned 1 [0093.753] GetTextMetricsW (in: hdc=0x490108ba, lptm=0x119e9b8 | out: lptm=0x119e9b8) returned 1 [0093.753] DrawTextExW (in: hdc=0x490108ba, lpchText="https://www.youtube.com/watch?v=Ji9IwPId5Uk", cchText=43, lprc=0x119eac4, format=0x100400, lpdtp=0x2eda580 | out: lpchText="https://www.youtube.com/watch?v=Ji9IwPId5Uk", lprc=0x119eac4) returned 13 [0093.753] GdipCreateRegion (region=0x119eaa4) returned 0x0 [0093.753] GdipGetClip (graphics=0x5608898, region=0x5608c28) returned 0x0 [0093.753] GdipCreateMatrix (matrix=0x119eaa4) returned 0x0 [0093.753] GdipGetWorldTransform (graphics=0x5608898, matrix=0x5608cb8) returned 0x0 [0093.753] GdipIsMatrixIdentity (matrix=0x5608cb8, result=0x119eabc) returned 0x0 [0093.753] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0093.753] GdipGetMatrixElements (matrix=0x5608cb8, matrixOut=0x15d6050) returned 0x0 [0093.753] LocalFree (hMem=0x15d6050) returned 0x0 [0093.753] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.753] GdipGetMatrixElements (matrix=0x5608cb8, matrixOut=0x15d6520) returned 0x0 [0093.753] LocalFree (hMem=0x15d6520) returned 0x0 [0093.753] GdipDeleteMatrix (matrix=0x5608cb8) returned 0x0 [0093.753] GdipIsInfiniteRegion (region=0x5608c28, graphics=0x5608898, result=0x119eae8) returned 0x0 [0093.753] GdipIsInfiniteRegion (region=0x5608c28, graphics=0x5608898, result=0x119ead8) returned 0x0 [0093.753] GdipGetRegionHRgn (region=0x5608c28, graphics=0x5608898, hRgn=0x119ead8) returned 0x0 [0093.753] GdipDeleteRegion (region=0x5608c28) returned 0x0 [0093.753] GdipGetDC (graphics=0x5608898, hdc=0x119eaf0) returned 0x0 [0093.754] GetCurrentObject (hdc=0x380108a0, type=0x1) returned 0x1b00017 [0093.754] GetCurrentObject (hdc=0x380108a0, type=0x2) returned 0x1900010 [0093.754] GetCurrentObject (hdc=0x380108a0, type=0x7) returned 0x600508cf [0093.754] GetCurrentObject (hdc=0x380108a0, type=0x6) returned 0x18a0048 [0093.754] SaveDC (hdc=0x380108a0) returned 1 [0093.754] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5e040894 [0093.754] GetClipRgn (hdc=0x380108a0, hrgn=0x5e040894) returned 0 [0093.754] SelectClipRgn (hdc=0x380108a0, hrgn=0x500408c1) returned 2 [0093.754] DeleteObject (ho=0x5e040894) returned 1 [0093.754] DeleteObject (ho=0x500408c1) returned 1 [0093.754] OffsetViewportOrgEx (in: hdc=0x380108a0, x=0, y=0, lppt=0x2eda778 | out: lppt=0x2eda778) returned 1 [0093.754] RestoreDC (hdc=0x380108a0, nSavedDC=-1) returned 1 [0093.754] GdipReleaseDC (graphics=0x5608898, hdc=0x380108a0) returned 0x0 [0093.755] GdipCreateRegionRectI (rect=0x119eb08, region=0x119eb18) returned 0x0 [0093.755] GdipDeleteFont (font=0x5608c00) returned 0x0 [0093.755] GdipDeleteStringFormat (format=0x5608ba8) returned 0x0 [0093.755] GdipCreateSolidFill (color=0xfff0f0f0, brush=0x119ebc0) returned 0x0 [0093.756] GdipCreateSolidFill (color=0xff4169e1, brush=0x119ebc0) returned 0x0 [0093.756] GetClientRect (in: hWnd=0x102be, lpRect=0x119eb2c | out: lpRect=0x119eb2c) returned 1 [0093.757] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119e958, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8byt¤î\x19\x01°«í\x02\x18", lpUsedDefaultChar=0x0) returned 17 [0093.757] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0093.757] GdipCreateRegion (region=0x119e968) returned 0x0 [0093.757] GdipGetClip (graphics=0x5608898, region=0x5608b78) returned 0x0 [0093.757] GdipCreateMatrix (matrix=0x119e968) returned 0x0 [0093.757] GdipGetWorldTransform (graphics=0x5608898, matrix=0x5608ce8) returned 0x0 [0093.757] GdipIsMatrixIdentity (matrix=0x5608ce8, result=0x119e980) returned 0x0 [0093.757] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.757] GdipGetMatrixElements (matrix=0x5608ce8, matrixOut=0x15d6520) returned 0x0 [0093.757] LocalFree (hMem=0x15d6520) returned 0x0 [0093.757] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0093.757] GdipGetMatrixElements (matrix=0x5608ce8, matrixOut=0x15d6050) returned 0x0 [0093.757] LocalFree (hMem=0x15d6050) returned 0x0 [0093.757] GdipDeleteMatrix (matrix=0x5608ce8) returned 0x0 [0093.757] GdipIsInfiniteRegion (region=0x5608b78, graphics=0x5608898, result=0x119e9ac) returned 0x0 [0093.757] GdipIsInfiniteRegion (region=0x5608b78, graphics=0x5608898, result=0x119e99c) returned 0x0 [0093.757] GdipGetRegionHRgn (region=0x5608b78, graphics=0x5608898, hRgn=0x119e99c) returned 0x0 [0093.757] GdipDeleteRegion (region=0x5608b78) returned 0x0 [0093.757] GdipGetDC (graphics=0x5608898, hdc=0x119e9b4) returned 0x0 [0093.757] GetCurrentObject (hdc=0x380108a0, type=0x1) returned 0x1b00017 [0093.757] GetCurrentObject (hdc=0x380108a0, type=0x2) returned 0x1900010 [0093.757] GetCurrentObject (hdc=0x380108a0, type=0x7) returned 0x600508cf [0093.757] GetCurrentObject (hdc=0x380108a0, type=0x6) returned 0x18a0048 [0093.757] SaveDC (hdc=0x380108a0) returned 1 [0093.757] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x510408c1 [0093.757] GetClipRgn (hdc=0x380108a0, hrgn=0x510408c1) returned 0 [0093.758] SelectClipRgn (hdc=0x380108a0, hrgn=0x5f040894) returned 2 [0093.758] DeleteObject (ho=0x510408c1) returned 1 [0093.758] DeleteObject (ho=0x5f040894) returned 1 [0093.758] OffsetViewportOrgEx (in: hdc=0x380108a0, x=0, y=0, lppt=0x2edadb8 | out: lppt=0x2edadb8) returned 1 [0093.758] OffsetViewportOrgEx (in: hdc=0x380108a0, x=-11, y=-44, lppt=0x2edadc8 | out: lppt=0x2edadc8) returned 1 [0093.758] GetClientRect (in: hWnd=0x102ba, lpRect=0x119e9e0 | out: lpRect=0x119e9e0) returned 1 [0093.758] GetCurrentObject (hdc=0x380108a0, type=0x1) returned 0x1b00017 [0093.758] GetCurrentObject (hdc=0x380108a0, type=0x2) returned 0x1900010 [0093.758] GetCurrentObject (hdc=0x380108a0, type=0x7) returned 0x600508cf [0093.758] GetCurrentObject (hdc=0x380108a0, type=0x6) returned 0x18a0048 [0093.758] SaveDC (hdc=0x380108a0) returned 2 [0093.758] GetNearestColor (hdc=0x380108a0, color=0x0) returned 0x0 [0093.758] CreateSolidBrush (color=0x0) returned 0x3910086a [0093.758] FillRect (hDC=0x380108a0, lprc=0x119e880, hbr=0x3910086a) returned 1 [0093.766] DeleteObject (ho=0x3910086a) returned 1 [0093.766] RestoreDC (hdc=0x380108a0, nSavedDC=-1) returned 1 [0093.766] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119e8e0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8byt¤î\x19\x01Ô­í\x02\x18", lpUsedDefaultChar=0x0) returned 17 [0093.766] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0093.766] SelectPalette (hdc=0x380108a0, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.766] GdipCreateFromHDC (hdc=0x380108a0, graphics=0x119e804) returned 0x0 [0093.766] GdipSetPageUnit (graphics=0x56199e8, unit=0x2) returned 0x0 [0093.766] GdipCreateMatrix (matrix=0x119e7c4) returned 0x0 [0093.766] GdipGetWorldTransform (graphics=0x56199e8, matrix=0x5608cb8) returned 0x0 [0093.766] GdipIsMatrixIdentity (matrix=0x5608cb8, result=0x119e7dc) returned 0x0 [0093.766] GdipDeleteMatrix (matrix=0x5608cb8) returned 0x0 [0093.766] GdipCreateRegion (region=0x119e7c4) returned 0x0 [0093.767] GdipGetClip (graphics=0x56199e8, region=0x56035b8) returned 0x0 [0093.767] GdipIsInfiniteRegion (region=0x56035b8, graphics=0x56199e8, result=0x119e7d0) returned 0x0 [0093.767] GdipDeleteRegion (region=0x56035b8) returned 0x0 [0093.767] GdipSaveGraphics (graphics=0x56199e8, state=0x119e7fc) returned 0x0 [0093.767] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119e7e0) returned 0x0 [0093.767] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119e7e0) returned 0x0 [0093.767] GdipCreateRegion (region=0x119e780) returned 0x0 [0093.767] GdipGetClip (graphics=0x56199e8, region=0x561a058) returned 0x0 [0093.767] GdipCreateMatrix (matrix=0x119e780) returned 0x0 [0093.767] GdipGetWorldTransform (graphics=0x56199e8, matrix=0x5608be8) returned 0x0 [0093.767] GdipIsMatrixIdentity (matrix=0x5608be8, result=0x119e798) returned 0x0 [0093.767] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.767] GdipGetMatrixElements (matrix=0x5608be8, matrixOut=0x15d6520) returned 0x0 [0093.767] LocalFree (hMem=0x15d6520) returned 0x0 [0093.767] GdipDeleteMatrix (matrix=0x5608be8) returned 0x0 [0093.767] GdipIsInfiniteRegion (region=0x561a058, graphics=0x56199e8, result=0x119e7c4) returned 0x0 [0093.767] GdipDeleteRegion (region=0x561a058) returned 0x0 [0093.767] GdipGetDC (graphics=0x56199e8, hdc=0x119e7cc) returned 0x0 [0093.767] GetCurrentObject (hdc=0x380108a0, type=0x1) returned 0x1b00017 [0093.767] GetCurrentObject (hdc=0x380108a0, type=0x2) returned 0x1900010 [0093.767] GetCurrentObject (hdc=0x380108a0, type=0x7) returned 0x600508cf [0093.767] GetCurrentObject (hdc=0x380108a0, type=0x6) returned 0x18a0048 [0093.767] SaveDC (hdc=0x380108a0) returned 2 [0093.767] OffsetViewportOrgEx (in: hdc=0x380108a0, x=0, y=0, lppt=0x2edb1d4 | out: lppt=0x2edb1d4) returned 1 [0093.767] GetWindowTextLengthW (hWnd=0x102ba) returned 22 [0093.767] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0093.767] GetSystemMetrics (nIndex=42) returned 0 [0093.767] GetWindowTextW (in: hWnd=0x102ba, lpString=0x119e72c, nMaxCount=23 | out: lpString="How to buy your file ?") returned 22 [0093.767] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xd, wParam=0x17, lParam=0x119e72c) returned 0x16 [0093.767] GetCurrentObject (hdc=0x380108a0, type=0x6) returned 0x18a0048 [0093.767] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e6ac | out: pv=0x119e6ac) returned 92 [0093.768] SelectObject (hdc=0x380108a0, h=0xb20a08b8) returned 0x18a0048 [0093.768] DrawTextExW (in: hdc=0x380108a0, lpchText="How to buy your file ?", cchText=22, lprc=0x119e7e8, format=0x102410, lpdtp=0x2edb2c0 | out: lpchText="How to buy your file ?", lprc=0x119e7e8) returned 13 [0093.768] GetWindowTextLengthW (hWnd=0x102ba) returned 22 [0093.768] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0093.768] GetSystemMetrics (nIndex=42) returned 0 [0093.768] GetWindowTextW (in: hWnd=0x102ba, lpString=0x119e72c, nMaxCount=23 | out: lpString="How to buy your file ?") returned 22 [0093.768] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xd, wParam=0x17, lParam=0x119e72c) returned 0x16 [0093.768] GetTextAlign (hdc=0x380108a0) returned 0x0 [0093.768] GetTextColor (hdc=0x380108a0) returned 0x0 [0093.768] SetTextColor (hdc=0x380108a0, color=0xf0f0f0) returned 0x0 [0093.768] GetCurrentObject (hdc=0x380108a0, type=0x6) returned 0xb20a08b8 [0093.768] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119e558 | out: pv=0x119e558) returned 92 [0093.768] GetBkMode (hdc=0x380108a0) returned 2 [0093.768] SetBkMode (hdc=0x380108a0, mode=1) returned 2 [0093.768] DrawTextExW (in: hdc=0x380108a0, lpchText="How to buy your file ?", cchText=22, lprc=0x119e78c, format=0x102010, lpdtp=0x2edb564 | out: lpchText="How to buy your file ?", lprc=0x119e78c) returned 13 [0093.768] RestoreDC (hdc=0x380108a0, nSavedDC=-1) returned 1 [0093.769] GdipReleaseDC (graphics=0x56199e8, hdc=0x380108a0) returned 0x0 [0093.769] GdipDrawLineI (graphics=0x56199e8, pen=0x56086d8, x1=1, y1=6, x2=1, y2=93) returned 0x0 [0093.769] GdipDrawLineI (graphics=0x56199e8, pen=0x56035b8, x1=0, y1=6, x2=0, y2=92) returned 0x0 [0093.769] GdipDrawLineI (graphics=0x56199e8, pen=0x56086d8, x1=0, y1=93, x2=340, y2=93) returned 0x0 [0093.769] GdipDrawLineI (graphics=0x56199e8, pen=0x56035b8, x1=0, y1=92, x2=339, y2=92) returned 0x0 [0093.769] GdipDrawLineI (graphics=0x56199e8, pen=0x56035b8, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0093.769] GdipDrawLineI (graphics=0x56199e8, pen=0x56086d8, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0093.769] GdipDrawLineI (graphics=0x56199e8, pen=0x56035b8, x1=117, y1=5, x2=338, y2=5) returned 0x0 [0093.769] GdipDrawLineI (graphics=0x56199e8, pen=0x56086d8, x1=117, y1=6, x2=339, y2=6) returned 0x0 [0093.769] GdipDrawLineI (graphics=0x56199e8, pen=0x56086d8, x1=339, y1=5, x2=339, y2=93) returned 0x0 [0093.769] GdipDrawLineI (graphics=0x56199e8, pen=0x56035b8, x1=338, y1=6, x2=338, y2=92) returned 0x0 [0093.769] GdipDeletePen (pen=0x56086d8) returned 0x0 [0093.769] GdipDeletePen (pen=0x56035b8) returned 0x0 [0093.769] GdipDeleteGraphics (graphics=0x56199e8) returned 0x0 [0093.769] SelectPalette (hdc=0x380108a0, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.769] RestoreDC (hdc=0x380108a0, nSavedDC=-1) returned 1 [0093.769] GdipReleaseDC (graphics=0x5608898, hdc=0x380108a0) returned 0x0 [0093.772] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main", ulOptions=0x0, samDesired=0x20019, phkResult=0x119eb34 | out: phkResult=0x119eb34*=0x2b4) returned 0x0 [0093.772] RegQueryValueExW (in: hKey=0x2b4, lpValueName="Anchor Underline", lpReserved=0x0, lpType=0x119eb54, lpData=0x0, lpcbData=0x119eb50*=0x0 | out: lpType=0x119eb54*=0x1, lpData=0x0, lpcbData=0x119eb50*=0x8) returned 0x0 [0093.773] RegQueryValueExW (in: hKey=0x2b4, lpValueName="Anchor Underline", lpReserved=0x0, lpType=0x119eb54, lpData=0x2edb8cc, lpcbData=0x119eb50*=0x8 | out: lpType=0x119eb54*=0x1, lpData="yes", lpcbData=0x119eb50*=0x8) returned 0x0 [0093.773] RegCloseKey (hKey=0x2b4) returned 0x0 [0093.773] GdipCreateFont (fontFamily=0x55f5350, emSize=0x41040000, style=4, unit=0x3, font=0x2edb900) returned 0x0 [0093.773] GdipGetFontSize (font=0x5603648, size=0x2edb904) returned 0x0 [0093.774] GdipCreateRegion (region=0x119ebc4) returned 0x0 [0093.774] GdipGetClip (graphics=0x5608898, region=0x56086d8) returned 0x0 [0093.783] GdipSetClipRegion (graphics=0x5608898, region=0x56086d8, combineMode=0x0) returned 0x0 [0093.783] GdipCreateMatrix (matrix=0x119ebc4) returned 0x0 [0093.783] GdipGetWorldTransform (graphics=0x5608898, matrix=0x5603670) returned 0x0 [0093.784] GdipGetRegionScansCount (region=0x5608c28, count=0x119ebbc, matrix=0x5603670) returned 0x0 [0093.785] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x1623168 [0093.785] GdipGetRegionScans (region=0x5608c28, rects=0x1623168, count=0x119ebbc, matrix=0x5603670) returned 0x0 [0093.786] LocalFree (hMem=0x1623168) returned 0x0 [0093.788] GdipCreateRegionRect (rect=0x119ebb4, region=0x119ebc4) returned 0x0 [0093.788] GdipSetClipRegion (graphics=0x5608898, region=0x56199e8, combineMode=0x4) returned 0x0 [0093.789] GdipDeleteRegion (region=0x56199e8) returned 0x0 [0093.789] GdipCreateRegionRect (rect=0x119ea38, region=0x119ea48) returned 0x0 [0093.789] GdipSetClipRegion (graphics=0x5608898, region=0x56199e8, combineMode=0x0) returned 0x0 [0093.789] GdipGetDC (graphics=0x5608898, hdc=0x119ea5c) returned 0x0 [0093.795] GetCurrentObject (hdc=0x380108a0, type=0x1) returned 0x1b00017 [0093.795] GetCurrentObject (hdc=0x380108a0, type=0x2) returned 0x1900010 [0093.795] GetCurrentObject (hdc=0x380108a0, type=0x7) returned 0x600508cf [0093.795] GetCurrentObject (hdc=0x380108a0, type=0x6) returned 0x18a0048 [0093.795] SaveDC (hdc=0x380108a0) returned 1 [0093.795] GetNearestColor (hdc=0x380108a0, color=0xe16941) returned 0xe16941 [0093.795] RestoreDC (hdc=0x380108a0, nSavedDC=-1) returned 1 [0093.795] GdipReleaseDC (graphics=0x5608898, hdc=0x380108a0) returned 0x0 [0093.795] GdipGetTextRenderingHint (graphics=0x5608898, mode=0x119e9fc) returned 0x0 [0093.795] GdipGetDC (graphics=0x5608898, hdc=0x119e9e8) returned 0x0 [0093.795] GetCurrentObject (hdc=0x380108a0, type=0x1) returned 0x1b00017 [0093.795] GetCurrentObject (hdc=0x380108a0, type=0x2) returned 0x1900010 [0093.795] GetCurrentObject (hdc=0x380108a0, type=0x7) returned 0x600508cf [0093.795] GetCurrentObject (hdc=0x380108a0, type=0x6) returned 0x18a0048 [0093.795] SaveDC (hdc=0x380108a0) returned 1 [0093.795] GetTextAlign (hdc=0x380108a0) returned 0x0 [0093.795] GetTextColor (hdc=0x380108a0) returned 0x0 [0093.795] SetTextColor (hdc=0x380108a0, color=0xe16941) returned 0x0 [0093.795] GetCurrentObject (hdc=0x380108a0, type=0x6) returned 0x18a0048 [0093.796] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e748 | out: pv=0x119e748) returned 92 [0093.796] SelectObject (hdc=0x380108a0, h=0x860a0555) returned 0x18a0048 [0093.796] GetBkMode (hdc=0x380108a0) returned 2 [0093.796] SetBkMode (hdc=0x380108a0, mode=1) returned 2 [0093.796] DrawTextExW (in: hdc=0x380108a0, lpchText="https://www.youtube.com/watch?v=Ji9IwPId5Uk", cchText=43, lprc=0x119e97c, format=0x100000, lpdtp=0x2edcb7c | out: lpchText="https://www.youtube.com/watch?v=Ji9IwPId5Uk", lprc=0x119e97c) returned 13 [0093.797] RestoreDC (hdc=0x380108a0, nSavedDC=-1) returned 1 [0093.797] GdipReleaseDC (graphics=0x5608898, hdc=0x380108a0) returned 0x0 [0093.797] GetFocus () returned 0x102d4 [0093.797] GdipSetClipRegion (graphics=0x5608898, region=0x56086d8, combineMode=0x0) returned 0x0 [0093.797] GdipDeleteBrush (brush=0x5603488) returned 0x0 [0093.797] GdipDeleteBrush (brush=0x56198b8) returned 0x0 [0093.797] GdipGetDC (graphics=0x5608898, hdc=0x119ed6c) returned 0x0 [0093.797] BitBlt (hdc=0xe010919, x=0, y=0, cx=243, cy=13, hdcSrc=0x380108a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0093.797] GdipReleaseDC (graphics=0x5608898, hdc=0x380108a0) returned 0x0 [0093.797] SelectPalette (hdc=0xe010919, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.797] SelectObject (hdc=0x380108a0, h=0x185000f) returned 0x600508cf [0093.797] DeleteDC (hdc=0x380108a0) returned 1 [0093.797] GdipDeleteGraphics (graphics=0x5608898) returned 0x0 [0093.798] EndPaint (hWnd=0x102be, lpPaint=0x119ed10) returned 1 [0093.798] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.798] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x15d0340) returned 0x1 [0093.798] IsWindowUnicode (hWnd=0x30258) returned 1 [0093.798] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.798] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x15d0340) returned 0x1 [0093.798] SetCursor (hCursor=0x10003) returned 0x10003 [0093.798] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.798] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.798] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x200, wParam=0x0, lParam=0xdb02d5) returned 0x0 [0093.798] GetKeyState (nVirtKey=1) returned 0 [0093.798] GetKeyState (nVirtKey=2) returned 1 [0093.798] GetKeyState (nVirtKey=4) returned 0 [0093.798] GetKeyState (nVirtKey=5) returned 0 [0093.798] GetKeyState (nVirtKey=6) returned 0 [0093.798] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.798] IsWindowUnicode (hWnd=0x102c0) returned 1 [0093.798] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.798] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.798] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.798] BeginPaint (in: hWnd=0x102c0, lpPaint=0x119ed1c | out: lpPaint=0x119ed1c) returned 0x470108fd [0093.798] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.798] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.798] CreateCompatibleDC (hdc=0x470108fd) returned 0x3b0108a0 [0093.798] GetObjectType (h=0x470108fd) returned 0x3 [0093.798] CreateCompatibleBitmap (hdc=0x470108fd, cx=1, cy=1) returned 0x2b05085d [0093.799] GetDIBits (in: hdc=0x470108fd, hbm=0x2b05085d, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7ac, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7ac) returned 1 [0093.799] GetDIBits (in: hdc=0x470108fd, hbm=0x2b05085d, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7ac, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7ac) returned 1 [0093.799] DeleteObject (ho=0x2b05085d) returned 1 [0093.799] CreateDIBSection (in: hdc=0x470108fd, lpbmi=0x119e7fc, usage=0x0, ppvBits=0x119ecf0, hSection=0x0, offset=0x0 | out: ppvBits=0x119ecf0) returned 0x5c050823 [0093.799] SelectObject (hdc=0x3b0108a0, h=0x5c050823) returned 0x185000f [0093.799] GdipCreateFromHDC (hdc=0x3b0108a0, graphics=0x119ecd4) returned 0x0 [0093.799] GdipTranslateWorldTransform (graphics=0x5608898, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0093.799] GdipSetClipRectI (graphics=0x5608898, x=0, y=0, width=328, height=73, combineMode=0x0) returned 0x0 [0093.799] GdipCreateMatrix (matrix=0x119ed7c) returned 0x0 [0093.799] GdipGetWorldTransform (graphics=0x5608898, matrix=0x5608b78) returned 0x0 [0093.799] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119ed94) returned 0x0 [0093.799] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0093.799] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x15d6050) returned 0x0 [0093.799] LocalFree (hMem=0x15d6050) returned 0x0 [0093.799] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0093.799] GdipCreateRegion (region=0x119ed7c) returned 0x0 [0093.799] GdipGetClip (graphics=0x5608898, region=0x56198b8) returned 0x0 [0093.799] GdipIsInfiniteRegion (region=0x56198b8, graphics=0x5608898, result=0x119ed88) returned 0x0 [0093.799] GdipSaveGraphics (graphics=0x5608898, state=0x119edb4) returned 0x0 [0093.799] GetWindowTextLengthW (hWnd=0x102c0) returned 135 [0093.799] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x87 [0093.799] GetSystemMetrics (nIndex=42) returned 0 [0093.799] GetWindowTextW (in: hWnd=0x102c0, lpString=0x119ebc0, nMaxCount=136 | out: lpString="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n") returned 135 [0093.799] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0xd, wParam=0x88, lParam=0x119ebc0) returned 0x87 [0093.799] GetClientRect (in: hWnd=0x102c0, lpRect=0x119ed7c | out: lpRect=0x119ed7c) returned 1 [0093.799] GdipCreateRegion (region=0x119ebcc) returned 0x0 [0093.799] GdipGetClip (graphics=0x5608898, region=0x5619948) returned 0x0 [0093.799] GdipCreateMatrix (matrix=0x119ebcc) returned 0x0 [0093.799] GdipGetWorldTransform (graphics=0x5608898, matrix=0x5608ba8) returned 0x0 [0093.800] GdipIsMatrixIdentity (matrix=0x5608ba8, result=0x119ebe4) returned 0x0 [0093.800] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.800] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6520) returned 0x0 [0093.800] LocalFree (hMem=0x15d6520) returned 0x0 [0093.800] GdipCombineRegionRegion (region=0x5619948, region2=0x56198b8, combineMode=0x1) returned 0x0 [0093.800] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.800] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6520) returned 0x0 [0093.800] LocalFree (hMem=0x15d6520) returned 0x0 [0093.800] GdipDeleteMatrix (matrix=0x5608ba8) returned 0x0 [0093.800] GdipIsInfiniteRegion (region=0x5619948, graphics=0x5608898, result=0x119ec10) returned 0x0 [0093.800] GdipIsInfiniteRegion (region=0x5619948, graphics=0x5608898, result=0x119ec00) returned 0x0 [0093.800] GdipGetRegionHRgn (region=0x5619948, graphics=0x5608898, hRgn=0x119ec00) returned 0x0 [0093.800] GdipDeleteRegion (region=0x5619948) returned 0x0 [0093.800] GdipGetDC (graphics=0x5608898, hdc=0x119ec18) returned 0x0 [0093.800] GetCurrentObject (hdc=0x3b0108a0, type=0x1) returned 0x1b00017 [0093.800] GetCurrentObject (hdc=0x3b0108a0, type=0x2) returned 0x1900010 [0093.800] GetCurrentObject (hdc=0x3b0108a0, type=0x7) returned 0x5c050823 [0093.800] GetCurrentObject (hdc=0x3b0108a0, type=0x6) returned 0x18a0048 [0093.800] SaveDC (hdc=0x3b0108a0) returned 1 [0093.800] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x60040894 [0093.800] GetClipRgn (hdc=0x3b0108a0, hrgn=0x60040894) returned 0 [0093.800] SelectClipRgn (hdc=0x3b0108a0, hrgn=0x550408c1) returned 2 [0093.800] DeleteObject (ho=0x60040894) returned 1 [0093.800] DeleteObject (ho=0x550408c1) returned 1 [0093.800] OffsetViewportOrgEx (in: hdc=0x3b0108a0, x=0, y=0, lppt=0x2ede31c | out: lppt=0x2ede31c) returned 1 [0093.800] GetNearestColor (hdc=0x3b0108a0, color=0x0) returned 0x0 [0093.800] CreateSolidBrush (color=0x0) returned 0x3a10086a [0093.800] FillRect (hDC=0x3b0108a0, lprc=0x119ec1c, hbr=0x3a10086a) returned 1 [0093.801] DeleteObject (ho=0x3a10086a) returned 1 [0093.801] RestoreDC (hdc=0x3b0108a0, nSavedDC=-1) returned 1 [0093.801] GdipReleaseDC (graphics=0x5608898, hdc=0x3b0108a0) returned 0x0 [0093.801] GdipRestoreGraphics (graphics=0x5608898, state=0xfd980dbd) returned 0x0 [0093.801] GdipDeleteRegion (region=0x56198b8) returned 0x0 [0093.801] GetWindowTextLengthW (hWnd=0x102c0) returned 135 [0093.801] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x87 [0093.801] GetSystemMetrics (nIndex=42) returned 0 [0093.801] GetWindowTextW (in: hWnd=0x102c0, lpString=0x119ebc0, nMaxCount=136 | out: lpString="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n") returned 135 [0093.801] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0xd, wParam=0x88, lParam=0x119ebc0) returned 0x87 [0093.801] GdipGetDC (graphics=0x5608898, hdc=0x119ec38) returned 0x0 [0093.801] GetCurrentObject (hdc=0x3b0108a0, type=0x1) returned 0x1b00017 [0093.801] GetCurrentObject (hdc=0x3b0108a0, type=0x2) returned 0x1900010 [0093.801] GetCurrentObject (hdc=0x3b0108a0, type=0x7) returned 0x5c050823 [0093.801] GetCurrentObject (hdc=0x3b0108a0, type=0x6) returned 0x18a0048 [0093.801] SaveDC (hdc=0x3b0108a0) returned 1 [0093.801] GetNearestColor (hdc=0x3b0108a0, color=0xf0f0f0) returned 0xf0f0f0 [0093.801] RestoreDC (hdc=0x3b0108a0, nSavedDC=-1) returned 1 [0093.801] GdipReleaseDC (graphics=0x5608898, hdc=0x3b0108a0) returned 0x0 [0093.802] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.802] AdjustWindowRectEx (in: lpRect=0x119eb5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119eb5c) returned 1 [0093.802] SelectObject (hdc=0x490108ba, h=0xb20a08b8) returned 0x860a0555 [0093.802] DrawTextExW (in: hdc=0x490108ba, lpchText="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n", cchText=135, lprc=0x119eb48, format=0x102400, lpdtp=0x2ede8ec | out: lpchText="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n", lprc=0x119eb48) returned 65 [0093.802] GdipGetTextRenderingHint (graphics=0x5608898, mode=0x119ebd8) returned 0x0 [0093.802] GdipGetDC (graphics=0x5608898, hdc=0x119ebc4) returned 0x0 [0093.802] GetCurrentObject (hdc=0x3b0108a0, type=0x1) returned 0x1b00017 [0093.802] GetCurrentObject (hdc=0x3b0108a0, type=0x2) returned 0x1900010 [0093.802] GetCurrentObject (hdc=0x3b0108a0, type=0x7) returned 0x5c050823 [0093.802] GetCurrentObject (hdc=0x3b0108a0, type=0x6) returned 0x18a0048 [0093.802] SaveDC (hdc=0x3b0108a0) returned 1 [0093.802] GetTextAlign (hdc=0x3b0108a0) returned 0x0 [0093.802] GetTextColor (hdc=0x3b0108a0) returned 0x0 [0093.802] SetTextColor (hdc=0x3b0108a0, color=0xf0f0f0) returned 0x0 [0093.802] GetCurrentObject (hdc=0x3b0108a0, type=0x6) returned 0x18a0048 [0093.802] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e924 | out: pv=0x119e924) returned 92 [0093.802] SelectObject (hdc=0x3b0108a0, h=0xb20a08b8) returned 0x18a0048 [0093.802] GetBkMode (hdc=0x3b0108a0) returned 2 [0093.803] SetBkMode (hdc=0x3b0108a0, mode=1) returned 2 [0093.803] DrawTextExW (in: hdc=0x3b0108a0, lpchText="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n", cchText=135, lprc=0x119eb58, format=0x100000, lpdtp=0x2edeb74 | out: lpchText="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n", lprc=0x119eb58) returned 78 [0093.803] RestoreDC (hdc=0x3b0108a0, nSavedDC=-1) returned 1 [0093.803] GdipReleaseDC (graphics=0x5608898, hdc=0x3b0108a0) returned 0x0 [0093.803] GdipGetDC (graphics=0x5608898, hdc=0x119ed74) returned 0x0 [0093.803] BitBlt (hdc=0x470108fd, x=0, y=0, cx=328, cy=73, hdcSrc=0x3b0108a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0093.803] GdipReleaseDC (graphics=0x5608898, hdc=0x3b0108a0) returned 0x0 [0093.803] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.803] SelectObject (hdc=0x3b0108a0, h=0x185000f) returned 0x5c050823 [0093.803] DeleteDC (hdc=0x3b0108a0) returned 1 [0093.803] GdipDeleteGraphics (graphics=0x5608898) returned 0x0 [0093.803] DeleteObject (ho=0x5c050823) returned 1 [0093.804] EndPaint (hWnd=0x102c0, lpPaint=0x119ed18) returned 1 [0093.804] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.804] IsWindowUnicode (hWnd=0x102c2) returned 1 [0093.804] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.804] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.804] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.804] BeginPaint (in: hWnd=0x102c2, lpPaint=0x119ed4c | out: lpPaint=0x119ed4c) returned 0xe010919 [0093.804] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.804] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.804] GetWindowTextLengthW (hWnd=0x102c2) returned 7 [0093.804] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0093.804] GetSystemMetrics (nIndex=42) returned 0 [0093.804] GetWindowTextW (in: hWnd=0x102c2, lpString=0x119ecf0, nMaxCount=8 | out: lpString="Message") returned 7 [0093.804] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0xd, wParam=0x8, lParam=0x119ecf0) returned 0x7 [0093.804] GetClientRect (in: hWnd=0x102c2, lpRect=0x119edac | out: lpRect=0x119edac) returned 1 [0093.804] GetCurrentObject (hdc=0xe010919, type=0x1) returned 0x1b00017 [0093.804] GetCurrentObject (hdc=0xe010919, type=0x2) returned 0x1900010 [0093.804] GetCurrentObject (hdc=0xe010919, type=0x7) returned 0xf0506d3 [0093.804] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0093.804] SaveDC (hdc=0xe010919) returned 1 [0093.804] GetNearestColor (hdc=0xe010919, color=0x0) returned 0x0 [0093.804] CreateSolidBrush (color=0x0) returned 0x3b10086a [0093.804] FillRect (hDC=0xe010919, lprc=0x119ec4c, hbr=0x3b10086a) returned 1 [0093.805] DeleteObject (ho=0x3b10086a) returned 1 [0093.805] RestoreDC (hdc=0xe010919, nSavedDC=-1) returned 1 [0093.805] GetWindowTextLengthW (hWnd=0x102c2) returned 7 [0093.805] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0093.805] GetSystemMetrics (nIndex=42) returned 0 [0093.805] GetWindowTextW (in: hWnd=0x102c2, lpString=0x119ecf0, nMaxCount=8 | out: lpString="Message") returned 7 [0093.805] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0xd, wParam=0x8, lParam=0x119ecf0) returned 0x7 [0093.805] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119ecac, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8bytÜî\x19\x01¬ëí\x02\x18", lpUsedDefaultChar=0x0) returned 17 [0093.817] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0093.817] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x4b08085a [0093.817] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119ebd0) returned 0x0 [0093.817] GdipSetPageUnit (graphics=0x5608898, unit=0x2) returned 0x0 [0093.817] GdipCreateMatrix (matrix=0x119eb90) returned 0x0 [0093.817] GdipGetWorldTransform (graphics=0x5608898, matrix=0x5608b78) returned 0x0 [0093.817] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119eba8) returned 0x0 [0093.817] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0093.817] GdipCreateRegion (region=0x119eb90) returned 0x0 [0093.817] GdipGetClip (graphics=0x5608898, region=0x56198b8) returned 0x0 [0093.817] GdipIsInfiniteRegion (region=0x56198b8, graphics=0x5608898, result=0x119eb9c) returned 0x0 [0093.817] GdipDeleteRegion (region=0x56198b8) returned 0x0 [0093.817] GdipSaveGraphics (graphics=0x5608898, state=0x119ebc8) returned 0x0 [0093.817] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119ebac) returned 0x0 [0093.817] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119ebac) returned 0x0 [0093.817] GdipCreateRegion (region=0x119eb4c) returned 0x0 [0093.817] GdipGetClip (graphics=0x5608898, region=0x56087f8) returned 0x0 [0093.817] GdipCreateMatrix (matrix=0x119eb4c) returned 0x0 [0093.817] GdipGetWorldTransform (graphics=0x5608898, matrix=0x5603548) returned 0x0 [0093.817] GdipIsMatrixIdentity (matrix=0x5603548, result=0x119eb64) returned 0x0 [0093.817] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.817] GdipGetMatrixElements (matrix=0x5603548, matrixOut=0x15d6520) returned 0x0 [0093.817] LocalFree (hMem=0x15d6520) returned 0x0 [0093.817] GdipDeleteMatrix (matrix=0x5603548) returned 0x0 [0093.817] GdipIsInfiniteRegion (region=0x56087f8, graphics=0x5608898, result=0x119eb90) returned 0x0 [0093.817] GdipDeleteRegion (region=0x56087f8) returned 0x0 [0093.817] GdipGetDC (graphics=0x5608898, hdc=0x119eb98) returned 0x0 [0093.817] GetCurrentObject (hdc=0xe010919, type=0x1) returned 0x1b00017 [0093.817] GetCurrentObject (hdc=0xe010919, type=0x2) returned 0x1900010 [0093.817] GetCurrentObject (hdc=0xe010919, type=0x7) returned 0xf0506d3 [0093.817] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0093.817] SaveDC (hdc=0xe010919) returned 1 [0093.817] OffsetViewportOrgEx (in: hdc=0xe010919, x=0, y=0, lppt=0x2edf17c | out: lppt=0x2edf17c) returned 1 [0093.818] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0093.818] GetObjectW (in: h=0x18a0048, c=92, pv=0x119ea78 | out: pv=0x119ea78) returned 92 [0093.818] SelectObject (hdc=0xe010919, h=0xb20a08b8) returned 0x18a0048 [0093.818] DrawTextExW (in: hdc=0xe010919, lpchText="Message", cchText=7, lprc=0x119ebb4, format=0x102410, lpdtp=0x2edf18c | out: lpchText="Message", lprc=0x119ebb4) returned 13 [0093.818] GetTextAlign (hdc=0xe010919) returned 0x0 [0093.818] GetTextColor (hdc=0xe010919) returned 0x0 [0093.818] SetTextColor (hdc=0xe010919, color=0xf0f0f0) returned 0x0 [0093.818] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0xb20a08b8 [0093.818] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119e924 | out: pv=0x119e924) returned 92 [0093.818] GetBkMode (hdc=0xe010919) returned 2 [0093.818] SetBkMode (hdc=0xe010919, mode=1) returned 2 [0093.818] DrawTextExW (in: hdc=0xe010919, lpchText="Message", cchText=7, lprc=0x119eb58, format=0x102010, lpdtp=0x2edf354 | out: lpchText="Message", lprc=0x119eb58) returned 13 [0093.818] RestoreDC (hdc=0xe010919, nSavedDC=-1) returned 1 [0093.818] GdipReleaseDC (graphics=0x5608898, hdc=0xe010919) returned 0x0 [0093.818] GdipDrawLineI (graphics=0x5608898, pen=0x56035b8, x1=1, y1=6, x2=1, y2=195) returned 0x0 [0093.818] GdipDrawLineI (graphics=0x5608898, pen=0x5608768, x1=0, y1=6, x2=0, y2=194) returned 0x0 [0093.819] GdipDrawLineI (graphics=0x5608898, pen=0x56035b8, x1=0, y1=195, x2=363, y2=195) returned 0x0 [0093.819] GdipDrawLineI (graphics=0x5608898, pen=0x5608768, x1=0, y1=194, x2=362, y2=194) returned 0x0 [0093.819] GdipDrawLineI (graphics=0x5608898, pen=0x5608768, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0093.819] GdipDrawLineI (graphics=0x5608898, pen=0x56035b8, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0093.819] GdipDrawLineI (graphics=0x5608898, pen=0x5608768, x1=58, y1=5, x2=361, y2=5) returned 0x0 [0093.819] GdipDrawLineI (graphics=0x5608898, pen=0x56035b8, x1=58, y1=6, x2=362, y2=6) returned 0x0 [0093.820] GdipDrawLineI (graphics=0x5608898, pen=0x56035b8, x1=362, y1=5, x2=362, y2=195) returned 0x0 [0093.820] GdipDrawLineI (graphics=0x5608898, pen=0x5608768, x1=361, y1=6, x2=361, y2=194) returned 0x0 [0093.820] GdipDeletePen (pen=0x56035b8) returned 0x0 [0093.820] GdipDeletePen (pen=0x5608768) returned 0x0 [0093.820] GdipDeleteGraphics (graphics=0x5608898) returned 0x0 [0093.820] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=0) returned 0x4b08085a [0093.820] SelectPalette (hdc=0xe010919, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.820] EndPaint (hWnd=0x102c2, lpPaint=0x119ed48) returned 1 [0093.820] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.820] IsWindowUnicode (hWnd=0x102c4) returned 1 [0093.820] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.820] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.820] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.820] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0093.820] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.827] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x14, wParam=0x470108fd, lParam=0x0) returned 0x1 [0093.827] SendMessageW (hWnd=0x102c4, Msg=0x2111, wParam=0x40002c4, lParam=0x102c4) returned 0x0 [0093.827] SendMessageW (hWnd=0x102c4, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0093.827] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0093.829] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.829] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x159033f) returned 0x1 [0093.829] IsWindowUnicode (hWnd=0x30258) returned 1 [0093.829] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.829] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x159033f) returned 0x1 [0093.829] SetCursor (hCursor=0x10003) returned 0x10003 [0093.830] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.830] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.830] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x200, wParam=0x0, lParam=0xd702d4) returned 0x0 [0093.830] GetKeyState (nVirtKey=1) returned 0 [0093.830] GetKeyState (nVirtKey=2) returned 1 [0093.830] GetKeyState (nVirtKey=4) returned 0 [0093.830] GetKeyState (nVirtKey=5) returned 0 [0093.830] GetKeyState (nVirtKey=6) returned 0 [0093.830] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.830] IsWindowUnicode (hWnd=0x102c6) returned 1 [0093.830] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.830] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.830] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.830] BeginPaint (in: hWnd=0x102c6, lpPaint=0x119ed4c | out: lpPaint=0x119ed4c) returned 0x470108fd [0093.830] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.830] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.830] GetWindowTextLengthW (hWnd=0x102c6) returned 8 [0093.830] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0093.830] GetSystemMetrics (nIndex=42) returned 0 [0093.830] GetWindowTextW (in: hWnd=0x102c6, lpString=0x119ecec, nMaxCount=9 | out: lpString="Bictoins") returned 8 [0093.830] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xd, wParam=0x9, lParam=0x119ecec) returned 0x8 [0093.830] GetClientRect (in: hWnd=0x102c6, lpRect=0x119edac | out: lpRect=0x119edac) returned 1 [0093.830] GetCurrentObject (hdc=0x470108fd, type=0x1) returned 0x1b00017 [0093.830] GetCurrentObject (hdc=0x470108fd, type=0x2) returned 0x1900010 [0093.830] GetCurrentObject (hdc=0x470108fd, type=0x7) returned 0xf0506d3 [0093.830] GetCurrentObject (hdc=0x470108fd, type=0x6) returned 0x18a0048 [0093.830] SaveDC (hdc=0x470108fd) returned 1 [0093.830] GetNearestColor (hdc=0x470108fd, color=0x0) returned 0x0 [0093.830] CreateSolidBrush (color=0x0) returned 0x3c10086a [0093.830] FillRect (hDC=0x470108fd, lprc=0x119ec4c, hbr=0x3c10086a) returned 1 [0093.830] DeleteObject (ho=0x3c10086a) returned 1 [0093.831] RestoreDC (hdc=0x470108fd, nSavedDC=-1) returned 1 [0093.831] GetWindowTextLengthW (hWnd=0x102c6) returned 8 [0093.831] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0093.831] GetSystemMetrics (nIndex=42) returned 0 [0093.831] GetWindowTextW (in: hWnd=0x102c6, lpString=0x119ecec, nMaxCount=9 | out: lpString="Bictoins") returned 8 [0093.831] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xd, wParam=0x9, lParam=0x119ecec) returned 0x8 [0093.831] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119ecac, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8bytÜî\x19\x01¨óí\x02\x18", lpUsedDefaultChar=0x0) returned 17 [0093.831] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0093.831] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x4b08085a [0093.831] GdipCreateFromHDC (hdc=0x470108fd, graphics=0x119ebd0) returned 0x0 [0093.831] GdipSetPageUnit (graphics=0x56087f8, unit=0x2) returned 0x0 [0093.831] GdipCreateMatrix (matrix=0x119eb90) returned 0x0 [0093.831] GdipGetWorldTransform (graphics=0x56087f8, matrix=0x5608cb8) returned 0x0 [0093.831] GdipIsMatrixIdentity (matrix=0x5608cb8, result=0x119eba8) returned 0x0 [0093.831] GdipDeleteMatrix (matrix=0x5608cb8) returned 0x0 [0093.831] GdipCreateRegion (region=0x119eb90) returned 0x0 [0093.831] GdipGetClip (graphics=0x56087f8, region=0x5603548) returned 0x0 [0093.831] GdipIsInfiniteRegion (region=0x5603548, graphics=0x56087f8, result=0x119eb9c) returned 0x0 [0093.831] GdipDeleteRegion (region=0x5603548) returned 0x0 [0093.831] GdipSaveGraphics (graphics=0x56087f8, state=0x119ebc8) returned 0x0 [0093.831] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119ebac) returned 0x0 [0093.831] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119ebac) returned 0x0 [0093.831] GdipCreateRegion (region=0x119eb4c) returned 0x0 [0093.831] GdipGetClip (graphics=0x56087f8, region=0x5608b68) returned 0x0 [0093.831] GdipCreateMatrix (matrix=0x119eb4c) returned 0x0 [0093.832] GdipGetWorldTransform (graphics=0x56087f8, matrix=0x5608bf8) returned 0x0 [0093.832] GdipIsMatrixIdentity (matrix=0x5608bf8, result=0x119eb64) returned 0x0 [0093.832] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.832] GdipGetMatrixElements (matrix=0x5608bf8, matrixOut=0x15d6520) returned 0x0 [0093.832] LocalFree (hMem=0x15d6520) returned 0x0 [0093.832] GdipDeleteMatrix (matrix=0x5608bf8) returned 0x0 [0093.832] GdipIsInfiniteRegion (region=0x5608b68, graphics=0x56087f8, result=0x119eb90) returned 0x0 [0093.832] GdipDeleteRegion (region=0x5608b68) returned 0x0 [0093.832] GdipGetDC (graphics=0x56087f8, hdc=0x119eb98) returned 0x0 [0093.832] GetCurrentObject (hdc=0x470108fd, type=0x1) returned 0x1b00017 [0093.832] GetCurrentObject (hdc=0x470108fd, type=0x2) returned 0x1900010 [0093.832] GetCurrentObject (hdc=0x470108fd, type=0x7) returned 0xf0506d3 [0093.832] GetCurrentObject (hdc=0x470108fd, type=0x6) returned 0x18a0048 [0093.832] SaveDC (hdc=0x470108fd) returned 1 [0093.832] OffsetViewportOrgEx (in: hdc=0x470108fd, x=0, y=0, lppt=0x2edf990 | out: lppt=0x2edf990) returned 1 [0093.832] GetCurrentObject (hdc=0x470108fd, type=0x6) returned 0x18a0048 [0093.832] GetObjectW (in: h=0x18a0048, c=92, pv=0x119ea78 | out: pv=0x119ea78) returned 92 [0093.832] SelectObject (hdc=0x470108fd, h=0xb20a08b8) returned 0x18a0048 [0093.832] DrawTextExW (in: hdc=0x470108fd, lpchText="Bictoins", cchText=8, lprc=0x119ebb4, format=0x102410, lpdtp=0x2edf9a0 | out: lpchText="Bictoins", lprc=0x119ebb4) returned 13 [0093.832] GetTextAlign (hdc=0x470108fd) returned 0x0 [0093.832] GetTextColor (hdc=0x470108fd) returned 0x0 [0093.832] SetTextColor (hdc=0x470108fd, color=0xf0f0f0) returned 0x0 [0093.832] GetCurrentObject (hdc=0x470108fd, type=0x6) returned 0xb20a08b8 [0093.832] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119e924 | out: pv=0x119e924) returned 92 [0093.832] GetBkMode (hdc=0x470108fd) returned 2 [0093.832] SetBkMode (hdc=0x470108fd, mode=1) returned 2 [0093.832] DrawTextExW (in: hdc=0x470108fd, lpchText="Bictoins", cchText=8, lprc=0x119eb58, format=0x102010, lpdtp=0x2edfb68 | out: lpchText="Bictoins", lprc=0x119eb58) returned 13 [0093.832] RestoreDC (hdc=0x470108fd, nSavedDC=-1) returned 1 [0093.833] GdipReleaseDC (graphics=0x56087f8, hdc=0x470108fd) returned 0x0 [0093.833] GdipDrawLineI (graphics=0x56087f8, pen=0x5608768, x1=1, y1=6, x2=1, y2=59) returned 0x0 [0093.833] GdipDrawLineI (graphics=0x56087f8, pen=0x5608ad8, x1=0, y1=6, x2=0, y2=58) returned 0x0 [0093.833] GdipDrawLineI (graphics=0x56087f8, pen=0x5608768, x1=0, y1=59, x2=711, y2=59) returned 0x0 [0093.833] GdipDrawLineI (graphics=0x56087f8, pen=0x5608ad8, x1=0, y1=58, x2=710, y2=58) returned 0x0 [0093.833] GdipDrawLineI (graphics=0x56087f8, pen=0x5608ad8, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0093.833] GdipDrawLineI (graphics=0x56087f8, pen=0x5608768, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0093.834] GdipDrawLineI (graphics=0x56087f8, pen=0x5608ad8, x1=52, y1=5, x2=709, y2=5) returned 0x0 [0093.834] GdipDrawLineI (graphics=0x56087f8, pen=0x5608768, x1=52, y1=6, x2=710, y2=6) returned 0x0 [0093.834] GdipDrawLineI (graphics=0x56087f8, pen=0x5608768, x1=710, y1=5, x2=710, y2=59) returned 0x0 [0093.834] GdipDrawLineI (graphics=0x56087f8, pen=0x5608ad8, x1=709, y1=6, x2=709, y2=58) returned 0x0 [0093.834] GdipDeletePen (pen=0x5608768) returned 0x0 [0093.834] GdipDeletePen (pen=0x5608ad8) returned 0x0 [0093.834] GdipDeleteGraphics (graphics=0x56087f8) returned 0x0 [0093.834] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=0) returned 0x4b08085a [0093.834] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.834] EndPaint (hWnd=0x102c6, lpPaint=0x119ed48) returned 1 [0093.834] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.834] IsWindowUnicode (hWnd=0x102c8) returned 1 [0093.835] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.835] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.835] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.835] BeginPaint (in: hWnd=0x102c8, lpPaint=0x119ed1c | out: lpPaint=0x119ed1c) returned 0xe010919 [0093.835] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.835] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.835] CreateCompatibleDC (hdc=0xe010919) returned 0x6c010823 [0093.835] SelectObject (hdc=0x6c010823, h=0x600508cf) returned 0x185000f [0093.835] GdipCreateFromHDC (hdc=0x6c010823, graphics=0x119ed14) returned 0x0 [0093.835] GdipTranslateWorldTransform (graphics=0x5608768, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0093.835] GdipSetClipRectI (graphics=0x5608768, x=0, y=0, width=166, height=13, combineMode=0x0) returned 0x0 [0093.835] GdipCreateMatrix (matrix=0x119ed7c) returned 0x0 [0093.835] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608a48) returned 0x0 [0093.835] GdipIsMatrixIdentity (matrix=0x5608a48, result=0x119ed94) returned 0x0 [0093.835] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0093.835] GdipGetMatrixElements (matrix=0x5608a48, matrixOut=0x15d6050) returned 0x0 [0093.835] LocalFree (hMem=0x15d6050) returned 0x0 [0093.835] GdipDeleteMatrix (matrix=0x5608a48) returned 0x0 [0093.835] GdipCreateRegion (region=0x119ed7c) returned 0x0 [0093.835] GdipGetClip (graphics=0x5608768, region=0x5608b68) returned 0x0 [0093.835] GdipIsInfiniteRegion (region=0x5608b68, graphics=0x5608768, result=0x119ed88) returned 0x0 [0093.835] GdipSaveGraphics (graphics=0x5608768, state=0x119edb4) returned 0x0 [0093.835] GetWindowTextLengthW (hWnd=0x102c8) returned 34 [0093.835] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0093.835] GetSystemMetrics (nIndex=42) returned 0 [0093.835] GetWindowTextW (in: hWnd=0x102c8, lpString=0x119ec88, nMaxCount=35 | out: lpString="Send 100$ to this bitcoins adress:") returned 34 [0093.835] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0xd, wParam=0x23, lParam=0x119ec88) returned 0x22 [0093.835] GetClientRect (in: hWnd=0x102c8, lpRect=0x119ed7c | out: lpRect=0x119ed7c) returned 1 [0093.836] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119eba8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8byt¬î\x19\x01ìûí\x02\x18", lpUsedDefaultChar=0x0) returned 17 [0093.836] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0093.836] GdipCreateRegion (region=0x119ebb8) returned 0x0 [0093.836] GdipGetClip (graphics=0x5608768, region=0x5603548) returned 0x0 [0093.836] GdipCreateMatrix (matrix=0x119ebb8) returned 0x0 [0093.836] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608bf8) returned 0x0 [0093.836] GdipIsMatrixIdentity (matrix=0x5608bf8, result=0x119ebd0) returned 0x0 [0093.836] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.836] GdipGetMatrixElements (matrix=0x5608bf8, matrixOut=0x15d6520) returned 0x0 [0093.836] LocalFree (hMem=0x15d6520) returned 0x0 [0093.836] GdipCombineRegionRegion (region=0x5603548, region2=0x5608b68, combineMode=0x1) returned 0x0 [0093.836] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.836] GdipGetMatrixElements (matrix=0x5608bf8, matrixOut=0x15d6520) returned 0x0 [0093.836] LocalFree (hMem=0x15d6520) returned 0x0 [0093.836] GdipDeleteMatrix (matrix=0x5608bf8) returned 0x0 [0093.845] GdipIsInfiniteRegion (region=0x5603548, graphics=0x5608768, result=0x119ebfc) returned 0x0 [0093.845] GdipIsInfiniteRegion (region=0x5603548, graphics=0x5608768, result=0x119ebec) returned 0x0 [0093.845] GdipGetRegionHRgn (region=0x5603548, graphics=0x5608768, hRgn=0x119ebec) returned 0x0 [0093.845] GdipDeleteRegion (region=0x5603548) returned 0x0 [0093.845] GdipGetDC (graphics=0x5608768, hdc=0x119ec04) returned 0x0 [0093.845] GetCurrentObject (hdc=0x6c010823, type=0x1) returned 0x1b00017 [0093.845] GetCurrentObject (hdc=0x6c010823, type=0x2) returned 0x1900010 [0093.845] GetCurrentObject (hdc=0x6c010823, type=0x7) returned 0x600508cf [0093.845] GetCurrentObject (hdc=0x6c010823, type=0x6) returned 0x18a0048 [0093.845] SaveDC (hdc=0x6c010823) returned 1 [0093.845] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x560408c1 [0093.845] GetClipRgn (hdc=0x6c010823, hrgn=0x560408c1) returned 0 [0093.845] SelectClipRgn (hdc=0x6c010823, hrgn=0x67040894) returned 2 [0093.845] DeleteObject (ho=0x560408c1) returned 1 [0093.845] DeleteObject (ho=0x67040894) returned 1 [0093.845] OffsetViewportOrgEx (in: hdc=0x6c010823, x=0, y=0, lppt=0x2ee0034 | out: lppt=0x2ee0034) returned 1 [0093.845] OffsetViewportOrgEx (in: hdc=0x6c010823, x=-6, y=-14, lppt=0x2ee0044 | out: lppt=0x2ee0044) returned 1 [0093.845] GetClientRect (in: hWnd=0x102c6, lpRect=0x119ec30 | out: lpRect=0x119ec30) returned 1 [0093.845] GetCurrentObject (hdc=0x6c010823, type=0x1) returned 0x1b00017 [0093.845] GetCurrentObject (hdc=0x6c010823, type=0x2) returned 0x1900010 [0093.845] GetCurrentObject (hdc=0x6c010823, type=0x7) returned 0x600508cf [0093.845] GetCurrentObject (hdc=0x6c010823, type=0x6) returned 0x18a0048 [0093.845] SaveDC (hdc=0x6c010823) returned 2 [0093.846] GetNearestColor (hdc=0x6c010823, color=0x0) returned 0x0 [0093.846] CreateSolidBrush (color=0x0) returned 0x3d10086a [0093.846] FillRect (hDC=0x6c010823, lprc=0x119ead0, hbr=0x3d10086a) returned 1 [0093.846] DeleteObject (ho=0x3d10086a) returned 1 [0093.846] RestoreDC (hdc=0x6c010823, nSavedDC=-1) returned 1 [0093.846] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119eb30, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8byt¬î\x19\x01P", lpUsedDefaultChar=0x0) returned 17 [0093.846] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0093.846] SelectPalette (hdc=0x6c010823, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.846] GdipCreateFromHDC (hdc=0x6c010823, graphics=0x119ea54) returned 0x0 [0093.846] GdipSetPageUnit (graphics=0x5619cd8, unit=0x2) returned 0x0 [0093.846] GdipCreateMatrix (matrix=0x119ea14) returned 0x0 [0093.846] GdipGetWorldTransform (graphics=0x5619cd8, matrix=0x5603548) returned 0x0 [0093.846] GdipIsMatrixIdentity (matrix=0x5603548, result=0x119ea2c) returned 0x0 [0093.846] GdipDeleteMatrix (matrix=0x5603548) returned 0x0 [0093.846] GdipCreateRegion (region=0x119ea14) returned 0x0 [0093.846] GdipGetClip (graphics=0x5619cd8, region=0x5603578) returned 0x0 [0093.846] GdipIsInfiniteRegion (region=0x5603578, graphics=0x5619cd8, result=0x119ea20) returned 0x0 [0093.846] GdipDeleteRegion (region=0x5603578) returned 0x0 [0093.846] GdipSaveGraphics (graphics=0x5619cd8, state=0x119ea4c) returned 0x0 [0093.846] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119ea30) returned 0x0 [0093.846] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119ea30) returned 0x0 [0093.846] GdipCreateRegion (region=0x119e9d0) returned 0x0 [0093.846] GdipGetClip (graphics=0x5619cd8, region=0x561a218) returned 0x0 [0093.847] GdipCreateMatrix (matrix=0x119e9d0) returned 0x0 [0093.847] GdipGetWorldTransform (graphics=0x5619cd8, matrix=0x5608bf8) returned 0x0 [0093.847] GdipIsMatrixIdentity (matrix=0x5608bf8, result=0x119e9e8) returned 0x0 [0093.847] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.847] GdipGetMatrixElements (matrix=0x5608bf8, matrixOut=0x15d6520) returned 0x0 [0093.847] LocalFree (hMem=0x15d6520) returned 0x0 [0093.847] GdipDeleteMatrix (matrix=0x5608bf8) returned 0x0 [0093.847] GdipIsInfiniteRegion (region=0x561a218, graphics=0x5619cd8, result=0x119ea14) returned 0x0 [0093.847] GdipDeleteRegion (region=0x561a218) returned 0x0 [0093.847] GdipGetDC (graphics=0x5619cd8, hdc=0x119ea1c) returned 0x0 [0093.847] GetCurrentObject (hdc=0x6c010823, type=0x1) returned 0x1b00017 [0093.847] GetCurrentObject (hdc=0x6c010823, type=0x2) returned 0x1900010 [0093.847] GetCurrentObject (hdc=0x6c010823, type=0x7) returned 0x600508cf [0093.847] GetCurrentObject (hdc=0x6c010823, type=0x6) returned 0x18a0048 [0093.847] SaveDC (hdc=0x6c010823) returned 2 [0093.847] OffsetViewportOrgEx (in: hdc=0x6c010823, x=0, y=0, lppt=0x2ee0450 | out: lppt=0x2ee0450) returned 1 [0093.847] GetWindowTextLengthW (hWnd=0x102c6) returned 8 [0093.847] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0093.847] GetSystemMetrics (nIndex=42) returned 0 [0093.847] GetWindowTextW (in: hWnd=0x102c6, lpString=0x119e998, nMaxCount=9 | out: lpString="Bictoins") returned 8 [0093.847] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xd, wParam=0x9, lParam=0x119e998) returned 0x8 [0093.847] GetCurrentObject (hdc=0x6c010823, type=0x6) returned 0x18a0048 [0093.847] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e8fc | out: pv=0x119e8fc) returned 92 [0093.847] SelectObject (hdc=0x6c010823, h=0xb20a08b8) returned 0x18a0048 [0093.847] DrawTextExW (in: hdc=0x6c010823, lpchText="Bictoins", cchText=8, lprc=0x119ea38, format=0x102410, lpdtp=0x2ee04e8 | out: lpchText="Bictoins", lprc=0x119ea38) returned 13 [0093.847] GetWindowTextLengthW (hWnd=0x102c6) returned 8 [0093.847] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0093.847] GetSystemMetrics (nIndex=42) returned 0 [0093.847] GetWindowTextW (in: hWnd=0x102c6, lpString=0x119e998, nMaxCount=9 | out: lpString="Bictoins") returned 8 [0093.847] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xd, wParam=0x9, lParam=0x119e998) returned 0x8 [0093.847] GetTextAlign (hdc=0x6c010823) returned 0x0 [0093.847] GetTextColor (hdc=0x6c010823) returned 0x0 [0093.847] SetTextColor (hdc=0x6c010823, color=0xf0f0f0) returned 0x0 [0093.848] GetCurrentObject (hdc=0x6c010823, type=0x6) returned 0xb20a08b8 [0093.848] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119e7a8 | out: pv=0x119e7a8) returned 92 [0093.848] GetBkMode (hdc=0x6c010823) returned 2 [0093.848] SetBkMode (hdc=0x6c010823, mode=1) returned 2 [0093.848] DrawTextExW (in: hdc=0x6c010823, lpchText="Bictoins", cchText=8, lprc=0x119e9dc, format=0x102010, lpdtp=0x2ee0738 | out: lpchText="Bictoins", lprc=0x119e9dc) returned 13 [0093.848] RestoreDC (hdc=0x6c010823, nSavedDC=-1) returned 1 [0093.848] GdipReleaseDC (graphics=0x5619cd8, hdc=0x6c010823) returned 0x0 [0093.848] GdipDrawLineI (graphics=0x5619cd8, pen=0x5608ad8, x1=1, y1=6, x2=1, y2=59) returned 0x0 [0093.848] GdipDrawLineI (graphics=0x5619cd8, pen=0x5603578, x1=0, y1=6, x2=0, y2=58) returned 0x0 [0093.848] GdipDrawLineI (graphics=0x5619cd8, pen=0x5608ad8, x1=0, y1=59, x2=711, y2=59) returned 0x0 [0093.848] GdipDrawLineI (graphics=0x5619cd8, pen=0x5603578, x1=0, y1=58, x2=710, y2=58) returned 0x0 [0093.848] GdipDrawLineI (graphics=0x5619cd8, pen=0x5603578, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0093.848] GdipDrawLineI (graphics=0x5619cd8, pen=0x5608ad8, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0093.848] GdipDrawLineI (graphics=0x5619cd8, pen=0x5603578, x1=52, y1=5, x2=709, y2=5) returned 0x0 [0093.848] GdipDrawLineI (graphics=0x5619cd8, pen=0x5608ad8, x1=52, y1=6, x2=710, y2=6) returned 0x0 [0093.848] GdipDrawLineI (graphics=0x5619cd8, pen=0x5608ad8, x1=710, y1=5, x2=710, y2=59) returned 0x0 [0093.848] GdipDrawLineI (graphics=0x5619cd8, pen=0x5603578, x1=709, y1=6, x2=709, y2=58) returned 0x0 [0093.848] GdipDeletePen (pen=0x5608ad8) returned 0x0 [0093.848] GdipDeletePen (pen=0x5603578) returned 0x0 [0093.848] GdipDeleteGraphics (graphics=0x5619cd8) returned 0x0 [0093.848] SelectPalette (hdc=0x6c010823, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.848] RestoreDC (hdc=0x6c010823, nSavedDC=-1) returned 1 [0093.848] GdipReleaseDC (graphics=0x5608768, hdc=0x6c010823) returned 0x0 [0093.848] GdipRestoreGraphics (graphics=0x5608768, state=0xfd920dbd) returned 0x0 [0093.848] GdipDeleteRegion (region=0x5608b68) returned 0x0 [0093.849] GetWindowTextLengthW (hWnd=0x102c8) returned 34 [0093.849] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0093.849] GetSystemMetrics (nIndex=42) returned 0 [0093.849] GetWindowTextW (in: hWnd=0x102c8, lpString=0x119ec88, nMaxCount=35 | out: lpString="Send 100$ to this bitcoins adress:") returned 34 [0093.849] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0xd, wParam=0x23, lParam=0x119ec88) returned 0x22 [0093.849] GdipGetDC (graphics=0x5608768, hdc=0x119ec38) returned 0x0 [0093.849] GetCurrentObject (hdc=0x6c010823, type=0x1) returned 0x1b00017 [0093.849] GetCurrentObject (hdc=0x6c010823, type=0x2) returned 0x1900010 [0093.849] GetCurrentObject (hdc=0x6c010823, type=0x7) returned 0x600508cf [0093.849] GetCurrentObject (hdc=0x6c010823, type=0x6) returned 0x18a0048 [0093.849] SaveDC (hdc=0x6c010823) returned 1 [0093.849] GetNearestColor (hdc=0x6c010823, color=0xff) returned 0xff [0093.849] RestoreDC (hdc=0x6c010823, nSavedDC=-1) returned 1 [0093.849] GdipReleaseDC (graphics=0x5608768, hdc=0x6c010823) returned 0x0 [0093.849] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.849] AdjustWindowRectEx (in: lpRect=0x119eb5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119eb5c) returned 1 [0093.849] GdipGetTextRenderingHint (graphics=0x5608768, mode=0x119ebd8) returned 0x0 [0093.849] GdipGetDC (graphics=0x5608768, hdc=0x119ebc4) returned 0x0 [0093.849] GetCurrentObject (hdc=0x6c010823, type=0x1) returned 0x1b00017 [0093.849] GetCurrentObject (hdc=0x6c010823, type=0x2) returned 0x1900010 [0093.849] GetCurrentObject (hdc=0x6c010823, type=0x7) returned 0x600508cf [0093.849] GetCurrentObject (hdc=0x6c010823, type=0x6) returned 0x18a0048 [0093.849] SaveDC (hdc=0x6c010823) returned 1 [0093.849] GetTextAlign (hdc=0x6c010823) returned 0x0 [0093.849] GetTextColor (hdc=0x6c010823) returned 0x0 [0093.849] SetTextColor (hdc=0x6c010823, color=0xff) returned 0x0 [0093.849] GetCurrentObject (hdc=0x6c010823, type=0x6) returned 0x18a0048 [0093.849] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e924 | out: pv=0x119e924) returned 92 [0093.849] SelectObject (hdc=0x6c010823, h=0xb20a08b8) returned 0x18a0048 [0093.849] GetBkMode (hdc=0x6c010823) returned 2 [0093.849] SetBkMode (hdc=0x6c010823, mode=1) returned 2 [0093.850] DrawTextExW (in: hdc=0x6c010823, lpchText="Send 100$ to this bitcoins adress:", cchText=34, lprc=0x119eb58, format=0x100000, lpdtp=0x2ee0c84 | out: lpchText="Send 100$ to this bitcoins adress:", lprc=0x119eb58) returned 13 [0093.850] RestoreDC (hdc=0x6c010823, nSavedDC=-1) returned 1 [0093.850] GdipReleaseDC (graphics=0x5608768, hdc=0x6c010823) returned 0x0 [0093.850] GdipGetDC (graphics=0x5608768, hdc=0x119ed74) returned 0x0 [0093.850] BitBlt (hdc=0xe010919, x=0, y=0, cx=166, cy=13, hdcSrc=0x6c010823, x1=0, y1=0, rop=0xcc0020) returned 1 [0093.850] GdipReleaseDC (graphics=0x5608768, hdc=0x6c010823) returned 0x0 [0093.850] SelectPalette (hdc=0xe010919, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.850] SelectObject (hdc=0x6c010823, h=0x185000f) returned 0x600508cf [0093.850] DeleteDC (hdc=0x6c010823) returned 1 [0093.850] GdipDeleteGraphics (graphics=0x5608768) returned 0x0 [0093.850] EndPaint (hWnd=0x102c8, lpPaint=0x119ed18) returned 1 [0093.850] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.850] IsWindowUnicode (hWnd=0x102ca) returned 1 [0093.850] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.850] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.850] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0093.850] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0093.850] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.850] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x14, wParam=0x470108fd, lParam=0x0) returned 0x1 [0093.851] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x138, wParam=0x470108fd, lParam=0x102ca) returned 0x1100074 [0093.851] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x138, wParam=0x470108fd, lParam=0x102ca) returned 0x1100074 [0093.852] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.858] IsWindowUnicode (hWnd=0x102cc) returned 1 [0093.858] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.858] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.858] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.858] BeginPaint (in: hWnd=0x102cc, lpPaint=0x119ed4c | out: lpPaint=0x119ed4c) returned 0xe010919 [0093.858] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.859] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.859] GetWindowTextLengthW (hWnd=0x102cc) returned 4 [0093.859] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0093.859] GetSystemMetrics (nIndex=42) returned 0 [0093.859] GetWindowTextW (in: hWnd=0x102cc, lpString=0x119ecf4, nMaxCount=5 | out: lpString="Time") returned 4 [0093.859] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0xd, wParam=0x5, lParam=0x119ecf4) returned 0x4 [0093.859] GetClientRect (in: hWnd=0x102cc, lpRect=0x119edac | out: lpRect=0x119edac) returned 1 [0093.859] GetCurrentObject (hdc=0xe010919, type=0x1) returned 0x1b00017 [0093.859] GetCurrentObject (hdc=0xe010919, type=0x2) returned 0x1900010 [0093.859] GetCurrentObject (hdc=0xe010919, type=0x7) returned 0xf0506d3 [0093.859] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0093.859] SaveDC (hdc=0xe010919) returned 1 [0093.859] GetNearestColor (hdc=0xe010919, color=0x0) returned 0x0 [0093.859] CreateSolidBrush (color=0x0) returned 0x3e10086a [0093.859] FillRect (hDC=0xe010919, lprc=0x119ec4c, hbr=0x3e10086a) returned 1 [0093.859] DeleteObject (ho=0x3e10086a) returned 1 [0093.859] RestoreDC (hdc=0xe010919, nSavedDC=-1) returned 1 [0093.859] GetWindowTextLengthW (hWnd=0x102cc) returned 4 [0093.859] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0093.859] GetSystemMetrics (nIndex=42) returned 0 [0093.859] GetWindowTextW (in: hWnd=0x102cc, lpString=0x119ecf4, nMaxCount=5 | out: lpString="Time") returned 4 [0093.859] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0xd, wParam=0x5, lParam=0x119ecf4) returned 0x4 [0093.859] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119ecac, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8bytÜî\x19\x01¼\x0cî\x02\x18", lpUsedDefaultChar=0x0) returned 17 [0093.860] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0093.860] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x4b08085a [0093.860] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119ebd0) returned 0x0 [0093.860] GdipSetPageUnit (graphics=0x5608768, unit=0x2) returned 0x0 [0093.860] GdipCreateMatrix (matrix=0x119eb90) returned 0x0 [0093.860] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5603548) returned 0x0 [0093.860] GdipIsMatrixIdentity (matrix=0x5603548, result=0x119eba8) returned 0x0 [0093.860] GdipDeleteMatrix (matrix=0x5603548) returned 0x0 [0093.860] GdipCreateRegion (region=0x119eb90) returned 0x0 [0093.860] GdipGetClip (graphics=0x5608768, region=0x56198b8) returned 0x0 [0093.860] GdipIsInfiniteRegion (region=0x56198b8, graphics=0x5608768, result=0x119eb9c) returned 0x0 [0093.860] GdipDeleteRegion (region=0x56198b8) returned 0x0 [0093.860] GdipSaveGraphics (graphics=0x5608768, state=0x119ebc8) returned 0x0 [0093.860] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119ebac) returned 0x0 [0093.860] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119ebac) returned 0x0 [0093.860] GdipCreateRegion (region=0x119eb4c) returned 0x0 [0093.860] GdipGetClip (graphics=0x5608768, region=0x56034a8) returned 0x0 [0093.860] GdipCreateMatrix (matrix=0x119eb4c) returned 0x0 [0093.860] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5603608) returned 0x0 [0093.860] GdipIsMatrixIdentity (matrix=0x5603608, result=0x119eb64) returned 0x0 [0093.860] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0093.860] GdipGetMatrixElements (matrix=0x5603608, matrixOut=0x15d6050) returned 0x0 [0093.860] LocalFree (hMem=0x15d6050) returned 0x0 [0093.860] GdipDeleteMatrix (matrix=0x5603608) returned 0x0 [0093.860] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119eb90) returned 0x0 [0093.860] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0093.860] GdipGetDC (graphics=0x5608768, hdc=0x119eb98) returned 0x0 [0093.860] GetCurrentObject (hdc=0xe010919, type=0x1) returned 0x1b00017 [0093.860] GetCurrentObject (hdc=0xe010919, type=0x2) returned 0x1900010 [0093.860] GetCurrentObject (hdc=0xe010919, type=0x7) returned 0xf0506d3 [0093.860] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0093.860] SaveDC (hdc=0xe010919) returned 1 [0093.860] OffsetViewportOrgEx (in: hdc=0xe010919, x=0, y=0, lppt=0x2ee11f8 | out: lppt=0x2ee11f8) returned 1 [0093.861] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0093.861] GetObjectW (in: h=0x18a0048, c=92, pv=0x119ea78 | out: pv=0x119ea78) returned 92 [0093.861] SelectObject (hdc=0xe010919, h=0xb20a08b8) returned 0x18a0048 [0093.861] DrawTextExW (in: hdc=0xe010919, lpchText="Time", cchText=4, lprc=0x119ebb4, format=0x102410, lpdtp=0x2ee1208 | out: lpchText="Time", lprc=0x119ebb4) returned 13 [0093.861] GetTextAlign (hdc=0xe010919) returned 0x0 [0093.861] GetTextColor (hdc=0xe010919) returned 0x0 [0093.861] SetTextColor (hdc=0xe010919, color=0xf0f0f0) returned 0x0 [0093.861] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0xb20a08b8 [0093.861] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119e924 | out: pv=0x119e924) returned 92 [0093.861] GetBkMode (hdc=0xe010919) returned 2 [0093.861] SetBkMode (hdc=0xe010919, mode=1) returned 2 [0093.861] DrawTextExW (in: hdc=0xe010919, lpchText="Time", cchText=4, lprc=0x119eb58, format=0x102010, lpdtp=0x2ee13d0 | out: lpchText="Time", lprc=0x119eb58) returned 13 [0093.861] RestoreDC (hdc=0xe010919, nSavedDC=-1) returned 1 [0093.861] GdipReleaseDC (graphics=0x5608768, hdc=0xe010919) returned 0x0 [0093.861] GdipDrawLineI (graphics=0x5608768, pen=0x5603578, x1=1, y1=6, x2=1, y2=93) returned 0x0 [0093.861] GdipDrawLineI (graphics=0x5608768, pen=0x5603418, x1=0, y1=6, x2=0, y2=92) returned 0x0 [0093.862] GdipDrawLineI (graphics=0x5608768, pen=0x5603578, x1=0, y1=93, x2=340, y2=93) returned 0x0 [0093.862] GdipDrawLineI (graphics=0x5608768, pen=0x5603418, x1=0, y1=92, x2=339, y2=92) returned 0x0 [0093.862] GdipDrawLineI (graphics=0x5608768, pen=0x5603418, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0093.862] GdipDrawLineI (graphics=0x5608768, pen=0x5603578, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0093.862] GdipDrawLineI (graphics=0x5608768, pen=0x5603418, x1=38, y1=5, x2=338, y2=5) returned 0x0 [0093.862] GdipDrawLineI (graphics=0x5608768, pen=0x5603578, x1=38, y1=6, x2=339, y2=6) returned 0x0 [0093.863] GdipDrawLineI (graphics=0x5608768, pen=0x5603578, x1=339, y1=5, x2=339, y2=93) returned 0x0 [0093.863] GdipDrawLineI (graphics=0x5608768, pen=0x5603418, x1=338, y1=6, x2=338, y2=92) returned 0x0 [0093.863] GdipDeletePen (pen=0x5603578) returned 0x0 [0093.863] GdipDeletePen (pen=0x5603418) returned 0x0 [0093.863] GdipDeleteGraphics (graphics=0x5608768) returned 0x0 [0093.863] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=0) returned 0x4b08085a [0093.863] SelectPalette (hdc=0xe010919, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.863] EndPaint (hWnd=0x102cc, lpPaint=0x119ed48) returned 1 [0093.863] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.863] IsWindowUnicode (hWnd=0x102ce) returned 1 [0093.863] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.863] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.863] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.863] BeginPaint (in: hWnd=0x102ce, lpPaint=0x119ed1c | out: lpPaint=0x119ed1c) returned 0x50108bd [0093.864] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.864] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.864] CreateCompatibleDC (hdc=0x50108bd) returned 0x76010823 [0093.864] DeleteObject (ho=0x600508cf) returned 1 [0093.864] GetObjectType (h=0x50108bd) returned 0x3 [0093.864] CreateCompatibleBitmap (hdc=0x50108bd, cx=1, cy=1) returned 0x3e0508d6 [0093.864] GetDIBits (in: hdc=0x50108bd, hbm=0x3e0508d6, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7ec, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7ec) returned 1 [0093.864] GetDIBits (in: hdc=0x50108bd, hbm=0x3e0508d6, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7ec, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7ec) returned 1 [0093.864] DeleteObject (ho=0x3e0508d6) returned 1 [0093.864] CreateDIBSection (in: hdc=0x50108bd, lpbmi=0x119e83c, usage=0x0, ppvBits=0x119ed30, hSection=0x0, offset=0x0 | out: ppvBits=0x119ed30) returned 0x610508cf [0093.864] SelectObject (hdc=0x76010823, h=0x610508cf) returned 0x185000f [0093.864] GdipCreateFromHDC (hdc=0x76010823, graphics=0x119ed14) returned 0x0 [0093.864] GdipTranslateWorldTransform (graphics=0x5608768, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0093.865] GdipSetClipRectI (graphics=0x5608768, x=0, y=0, width=328, height=23, combineMode=0x0) returned 0x0 [0093.865] GdipCreateMatrix (matrix=0x119ed7c) returned 0x0 [0093.865] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608b78) returned 0x0 [0093.865] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119ed94) returned 0x0 [0093.865] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.865] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x15d6520) returned 0x0 [0093.865] LocalFree (hMem=0x15d6520) returned 0x0 [0093.865] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0093.865] GdipCreateRegion (region=0x119ed7c) returned 0x0 [0093.865] GdipGetClip (graphics=0x5608768, region=0x56198b8) returned 0x0 [0093.865] GdipIsInfiniteRegion (region=0x56198b8, graphics=0x5608768, result=0x119ed88) returned 0x0 [0093.865] GdipSaveGraphics (graphics=0x5608768, state=0x119edb4) returned 0x0 [0093.865] GetWindowTextLengthW (hWnd=0x102ce) returned 37 [0093.865] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x25 [0093.865] GetSystemMetrics (nIndex=42) returned 0 [0093.865] GetWindowTextW (in: hWnd=0x102ce, lpString=0x119ec84, nMaxCount=38 | out: lpString="Your files will deleted after 30 days") returned 37 [0093.865] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0xd, wParam=0x26, lParam=0x119ec84) returned 0x25 [0093.865] GetClientRect (in: hWnd=0x102ce, lpRect=0x119ed7c | out: lpRect=0x119ed7c) returned 1 [0093.865] GdipCreateRegion (region=0x119ebcc) returned 0x0 [0093.865] GdipGetClip (graphics=0x5608768, region=0x5619948) returned 0x0 [0093.865] GdipCreateMatrix (matrix=0x119ebcc) returned 0x0 [0093.865] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608ba8) returned 0x0 [0093.865] GdipIsMatrixIdentity (matrix=0x5608ba8, result=0x119ebe4) returned 0x0 [0093.865] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.865] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6520) returned 0x0 [0093.865] LocalFree (hMem=0x15d6520) returned 0x0 [0093.866] GdipCombineRegionRegion (region=0x5619948, region2=0x56198b8, combineMode=0x1) returned 0x0 [0093.866] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.866] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6520) returned 0x0 [0093.866] LocalFree (hMem=0x15d6520) returned 0x0 [0093.866] GdipDeleteMatrix (matrix=0x5608ba8) returned 0x0 [0093.866] GdipIsInfiniteRegion (region=0x5619948, graphics=0x5608768, result=0x119ec10) returned 0x0 [0093.866] GdipIsInfiniteRegion (region=0x5619948, graphics=0x5608768, result=0x119ec00) returned 0x0 [0093.866] GdipGetRegionHRgn (region=0x5619948, graphics=0x5608768, hRgn=0x119ec00) returned 0x0 [0093.866] GdipDeleteRegion (region=0x5619948) returned 0x0 [0093.866] GdipGetDC (graphics=0x5608768, hdc=0x119ec18) returned 0x0 [0093.866] GetCurrentObject (hdc=0x76010823, type=0x1) returned 0x1b00017 [0093.866] GetCurrentObject (hdc=0x76010823, type=0x2) returned 0x1900010 [0093.866] GetCurrentObject (hdc=0x76010823, type=0x7) returned 0x610508cf [0093.866] GetCurrentObject (hdc=0x76010823, type=0x6) returned 0x18a0048 [0093.866] SaveDC (hdc=0x76010823) returned 1 [0093.866] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x68040894 [0093.866] GetClipRgn (hdc=0x76010823, hrgn=0x68040894) returned 0 [0093.866] SelectClipRgn (hdc=0x76010823, hrgn=0x5c0408c1) returned 2 [0093.866] DeleteObject (ho=0x68040894) returned 1 [0093.866] DeleteObject (ho=0x5c0408c1) returned 1 [0093.866] OffsetViewportOrgEx (in: hdc=0x76010823, x=0, y=0, lppt=0x2ee28c4 | out: lppt=0x2ee28c4) returned 1 [0093.866] GetNearestColor (hdc=0x76010823, color=0x0) returned 0x0 [0093.866] CreateSolidBrush (color=0x0) returned 0x3f10086a [0093.866] FillRect (hDC=0x76010823, lprc=0x119ec1c, hbr=0x3f10086a) returned 1 [0093.867] DeleteObject (ho=0x3f10086a) returned 1 [0093.867] RestoreDC (hdc=0x76010823, nSavedDC=-1) returned 1 [0093.867] GdipReleaseDC (graphics=0x5608768, hdc=0x76010823) returned 0x0 [0093.867] GdipRestoreGraphics (graphics=0x5608768, state=0xfd8c0dbd) returned 0x0 [0093.867] GdipDeleteRegion (region=0x56198b8) returned 0x0 [0093.867] GetWindowTextLengthW (hWnd=0x102ce) returned 37 [0093.867] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x25 [0093.867] GetSystemMetrics (nIndex=42) returned 0 [0093.867] GetWindowTextW (in: hWnd=0x102ce, lpString=0x119ec84, nMaxCount=38 | out: lpString="Your files will deleted after 30 days") returned 37 [0093.867] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0xd, wParam=0x26, lParam=0x119ec84) returned 0x25 [0093.867] GdipGetDC (graphics=0x5608768, hdc=0x119ec38) returned 0x0 [0093.867] GetCurrentObject (hdc=0x76010823, type=0x1) returned 0x1b00017 [0093.867] GetCurrentObject (hdc=0x76010823, type=0x2) returned 0x1900010 [0093.867] GetCurrentObject (hdc=0x76010823, type=0x7) returned 0x610508cf [0093.867] GetCurrentObject (hdc=0x76010823, type=0x6) returned 0x18a0048 [0093.867] SaveDC (hdc=0x76010823) returned 1 [0093.867] GetNearestColor (hdc=0x76010823, color=0xf0f0f0) returned 0xf0f0f0 [0093.867] RestoreDC (hdc=0x76010823, nSavedDC=-1) returned 1 [0093.867] GdipReleaseDC (graphics=0x5608768, hdc=0x76010823) returned 0x0 [0093.868] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0093.876] AdjustWindowRectEx (in: lpRect=0x119eb5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119eb5c) returned 1 [0093.876] DrawTextExW (in: hdc=0x490108ba, lpchText="Your files will deleted after 30 days", cchText=37, lprc=0x119eb48, format=0x102400, lpdtp=0x2ee2c48 | out: lpchText="Your files will deleted after 30 days", lprc=0x119eb48) returned 13 [0093.876] GdipGetTextRenderingHint (graphics=0x5608768, mode=0x119ebd8) returned 0x0 [0093.876] GdipGetDC (graphics=0x5608768, hdc=0x119ebc4) returned 0x0 [0093.876] GetCurrentObject (hdc=0x76010823, type=0x1) returned 0x1b00017 [0093.876] GetCurrentObject (hdc=0x76010823, type=0x2) returned 0x1900010 [0093.876] GetCurrentObject (hdc=0x76010823, type=0x7) returned 0x610508cf [0093.876] GetCurrentObject (hdc=0x76010823, type=0x6) returned 0x18a0048 [0093.876] SaveDC (hdc=0x76010823) returned 1 [0093.876] GetTextAlign (hdc=0x76010823) returned 0x0 [0093.876] GetTextColor (hdc=0x76010823) returned 0x0 [0093.876] SetTextColor (hdc=0x76010823, color=0xf0f0f0) returned 0x0 [0093.876] GetCurrentObject (hdc=0x76010823, type=0x6) returned 0x18a0048 [0093.876] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e924 | out: pv=0x119e924) returned 92 [0093.877] SelectObject (hdc=0x76010823, h=0xb20a08b8) returned 0x18a0048 [0093.877] GetBkMode (hdc=0x76010823) returned 2 [0093.877] SetBkMode (hdc=0x76010823, mode=1) returned 2 [0093.877] DrawTextExW (in: hdc=0x76010823, lpchText="Your files will deleted after 30 days", cchText=37, lprc=0x119eb58, format=0x100000, lpdtp=0x2ee2ed0 | out: lpchText="Your files will deleted after 30 days", lprc=0x119eb58) returned 13 [0093.877] RestoreDC (hdc=0x76010823, nSavedDC=-1) returned 1 [0093.877] GdipReleaseDC (graphics=0x5608768, hdc=0x76010823) returned 0x0 [0093.877] GdipGetDC (graphics=0x5608768, hdc=0x119ed74) returned 0x0 [0093.877] BitBlt (hdc=0x50108bd, x=0, y=0, cx=328, cy=23, hdcSrc=0x76010823, x1=0, y1=0, rop=0xcc0020) returned 1 [0093.877] GdipReleaseDC (graphics=0x5608768, hdc=0x76010823) returned 0x0 [0093.877] SelectPalette (hdc=0x50108bd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.877] SelectObject (hdc=0x76010823, h=0x185000f) returned 0x610508cf [0093.877] DeleteDC (hdc=0x76010823) returned 1 [0093.877] GdipDeleteGraphics (graphics=0x5608768) returned 0x0 [0093.878] EndPaint (hWnd=0x102ce, lpPaint=0x119ed18) returned 1 [0093.878] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.878] IsWindowUnicode (hWnd=0x102d0) returned 1 [0093.878] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.878] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.878] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.878] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0093.878] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.878] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x14, wParam=0x470108fd, lParam=0x0) returned 0x1 [0093.878] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.878] IsWindowUnicode (hWnd=0x102d2) returned 1 [0093.878] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.878] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.878] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.878] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0093.878] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.878] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x14, wParam=0xe010919, lParam=0x0) returned 0x1 [0093.878] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.879] IsWindowUnicode (hWnd=0x102d4) returned 1 [0093.879] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.879] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.879] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.879] BeginPaint (in: hWnd=0x102d4, lpPaint=0x119ed10 | out: lpPaint=0x119ed10) returned 0x50108bd [0093.879] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0093.879] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x14, wParam=0x50108bd, lParam=0x0) returned 0x1 [0093.879] GetStockObject (i=5) returned 0x1900015 [0093.879] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0093.879] CreateCompatibleDC (hdc=0x50108bd) returned 0x7d010823 [0093.879] GetObjectType (h=0x50108bd) returned 0x3 [0093.879] CreateCompatibleBitmap (hdc=0x50108bd, cx=1, cy=1) returned 0x4e05085d [0093.879] GetDIBits (in: hdc=0x50108bd, hbm=0x4e05085d, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0093.879] GetDIBits (in: hdc=0x50108bd, hbm=0x4e05085d, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0093.879] DeleteObject (ho=0x4e05085d) returned 1 [0093.879] CreateDIBSection (in: hdc=0x50108bd, lpbmi=0x119e7f0, usage=0x0, ppvBits=0x119ece4, hSection=0x0, offset=0x0 | out: ppvBits=0x119ece4) returned 0x520508d8 [0093.879] SelectObject (hdc=0x7d010823, h=0x520508d8) returned 0x185000f [0093.879] GdipCreateFromHDC (hdc=0x7d010823, graphics=0x119ecc8) returned 0x0 [0093.879] GdipTranslateWorldTransform (graphics=0x5608768, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0093.879] GdipSetClipRectI (graphics=0x5608768, x=0, y=0, width=711, height=36, combineMode=0x0) returned 0x0 [0093.879] GdipCreateMatrix (matrix=0x119ed70) returned 0x0 [0093.880] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608b78) returned 0x0 [0093.880] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119ed88) returned 0x0 [0093.880] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0093.880] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x15d6050) returned 0x0 [0093.880] LocalFree (hMem=0x15d6050) returned 0x0 [0093.880] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0093.880] GdipCreateRegion (region=0x119ed70) returned 0x0 [0093.880] GdipGetClip (graphics=0x5608768, region=0x56198b8) returned 0x0 [0093.880] GdipIsInfiniteRegion (region=0x56198b8, graphics=0x5608768, result=0x119ed7c) returned 0x0 [0093.880] GdipSaveGraphics (graphics=0x5608768, state=0x119eda8) returned 0x0 [0093.880] GdipRestoreGraphics (graphics=0x5608768, state=0xfd8a0dbd) returned 0x0 [0093.880] GdipDeleteRegion (region=0x56198b8) returned 0x0 [0093.880] GdipGetDC (graphics=0x5608768, hdc=0x119eaf8) returned 0x0 [0093.880] GetCurrentObject (hdc=0x7d010823, type=0x1) returned 0x1b00017 [0093.880] GetCurrentObject (hdc=0x7d010823, type=0x2) returned 0x1900010 [0093.880] GetCurrentObject (hdc=0x7d010823, type=0x7) returned 0x520508d8 [0093.880] GetCurrentObject (hdc=0x7d010823, type=0x6) returned 0x18a0048 [0093.880] SaveDC (hdc=0x7d010823) returned 1 [0093.880] GetNearestColor (hdc=0x7d010823, color=0xc0) returned 0xc0 [0093.880] GetNearestColor (hdc=0x7d010823, color=0x40) returned 0x40 [0093.880] GetNearestColor (hdc=0x7d010823, color=0x0) returned 0x0 [0093.880] GetNearestColor (hdc=0x7d010823, color=0x5656e5) returned 0x5656e5 [0093.880] GetNearestColor (hdc=0x7d010823, color=0x0) returned 0x0 [0093.880] GetNearestColor (hdc=0x7d010823, color=0x6060ff) returned 0x6060ff [0093.880] GetNearestColor (hdc=0x7d010823, color=0x5656e5) returned 0x5656e5 [0093.880] GetNearestColor (hdc=0x7d010823, color=0xe6) returned 0xe6 [0093.880] GetNearestColor (hdc=0x7d010823, color=0x0) returned 0x0 [0093.880] RestoreDC (hdc=0x7d010823, nSavedDC=-1) returned 1 [0093.880] GdipReleaseDC (graphics=0x5608768, hdc=0x7d010823) returned 0x0 [0093.880] DrawTextExW (in: hdc=0x490108ba, lpchText="Decrypt", cchText=7, lprc=0x119e99c, format=0x102415, lpdtp=0x2ee44d0 | out: lpchText="Decrypt", lprc=0x119e99c) returned 13 [0093.880] GdipCreateRegion (region=0x119e9f0) returned 0x0 [0093.880] GdipGetClip (graphics=0x5608768, region=0x56198b8) returned 0x0 [0093.880] GdipCreateMatrix (matrix=0x119e9f0) returned 0x0 [0093.880] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608ba8) returned 0x0 [0093.880] GdipIsMatrixIdentity (matrix=0x5608ba8, result=0x119ea08) returned 0x0 [0093.881] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.881] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6520) returned 0x0 [0093.881] LocalFree (hMem=0x15d6520) returned 0x0 [0093.881] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0093.881] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6520) returned 0x0 [0093.881] LocalFree (hMem=0x15d6520) returned 0x0 [0093.881] GdipDeleteMatrix (matrix=0x5608ba8) returned 0x0 [0093.881] GdipIsInfiniteRegion (region=0x56198b8, graphics=0x5608768, result=0x119ea34) returned 0x0 [0093.881] GdipIsInfiniteRegion (region=0x56198b8, graphics=0x5608768, result=0x119ea24) returned 0x0 [0093.881] GdipGetRegionHRgn (region=0x56198b8, graphics=0x5608768, hRgn=0x119ea24) returned 0x0 [0093.881] GdipDeleteRegion (region=0x56198b8) returned 0x0 [0093.881] GdipGetDC (graphics=0x5608768, hdc=0x119ea3c) returned 0x0 [0093.881] GetCurrentObject (hdc=0x7d010823, type=0x1) returned 0x1b00017 [0093.881] GetCurrentObject (hdc=0x7d010823, type=0x2) returned 0x1900010 [0093.881] GetCurrentObject (hdc=0x7d010823, type=0x7) returned 0x520508d8 [0093.881] GetCurrentObject (hdc=0x7d010823, type=0x6) returned 0x18a0048 [0093.881] SaveDC (hdc=0x7d010823) returned 1 [0093.881] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d0408c1 [0093.881] GetClipRgn (hdc=0x7d010823, hrgn=0x5d0408c1) returned 0 [0093.881] SelectClipRgn (hdc=0x7d010823, hrgn=0x6c040894) returned 2 [0093.881] DeleteObject (ho=0x5d0408c1) returned 1 [0093.881] DeleteObject (ho=0x6c040894) returned 1 [0093.881] OffsetViewportOrgEx (in: hdc=0x7d010823, x=0, y=0, lppt=0x2ee46c8 | out: lppt=0x2ee46c8) returned 1 [0093.881] GetNearestColor (hdc=0x7d010823, color=0xc0) returned 0xc0 [0093.881] CreateSolidBrush (color=0xc0) returned 0x4010086a [0093.881] FillRect (hDC=0x7d010823, lprc=0x119ea40, hbr=0x4010086a) returned 1 [0093.882] DeleteObject (ho=0x4010086a) returned 1 [0093.882] RestoreDC (hdc=0x7d010823, nSavedDC=-1) returned 1 [0093.882] GdipReleaseDC (graphics=0x5608768, hdc=0x7d010823) returned 0x0 [0093.882] GdipGetTextRenderingHint (graphics=0x5608768, mode=0x119eabc) returned 0x0 [0093.882] GdipGetDC (graphics=0x5608768, hdc=0x119eaa8) returned 0x0 [0093.882] GetCurrentObject (hdc=0x7d010823, type=0x1) returned 0x1b00017 [0093.882] GetCurrentObject (hdc=0x7d010823, type=0x2) returned 0x1900010 [0093.882] GetCurrentObject (hdc=0x7d010823, type=0x7) returned 0x520508d8 [0093.882] GetCurrentObject (hdc=0x7d010823, type=0x6) returned 0x18a0048 [0093.882] SaveDC (hdc=0x7d010823) returned 1 [0093.882] GetTextAlign (hdc=0x7d010823) returned 0x0 [0093.882] GetTextColor (hdc=0x7d010823) returned 0x0 [0093.882] GetCurrentObject (hdc=0x7d010823, type=0x6) returned 0x18a0048 [0093.882] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e808 | out: pv=0x119e808) returned 92 [0093.882] SelectObject (hdc=0x7d010823, h=0xb20a08b8) returned 0x18a0048 [0093.882] GetBkMode (hdc=0x7d010823) returned 2 [0093.882] SetBkMode (hdc=0x7d010823, mode=1) returned 2 [0093.882] DrawTextExW (in: hdc=0x7d010823, lpchText="Decrypt", cchText=7, lprc=0x119e8ec, format=0x102415, lpdtp=0x2ee4928 | out: lpchText="Decrypt", lprc=0x119e8ec) returned 13 [0093.882] DrawTextExW (in: hdc=0x7d010823, lpchText="Decrypt", cchText=7, lprc=0x119ea3c, format=0x102015, lpdtp=0x2ee4928 | out: lpchText="Decrypt", lprc=0x119ea3c) returned 13 [0093.882] RestoreDC (hdc=0x7d010823, nSavedDC=-1) returned 1 [0093.882] GdipReleaseDC (graphics=0x5608768, hdc=0x7d010823) returned 0x0 [0093.882] GetFocus () returned 0x102d4 [0093.882] GetFocus () returned 0x102d4 [0093.882] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb40) returned 0x0 [0093.882] GdipDrawRectangleI (graphics=0x5608768, pen=0x5603418, x=0, y=0, width=710, height=35) returned 0x0 [0093.882] GdipDeletePen (pen=0x5603418) returned 0x0 [0093.883] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb20) returned 0x0 [0093.883] GdipDrawRectangleI (graphics=0x5608768, pen=0x5603418, x=1, y=1, width=708, height=33) returned 0x0 [0093.883] GdipDeletePen (pen=0x5603418) returned 0x0 [0093.883] GdipGetDC (graphics=0x5608768, hdc=0x119ed68) returned 0x0 [0093.883] BitBlt (hdc=0x50108bd, x=0, y=0, cx=711, cy=36, hdcSrc=0x7d010823, x1=0, y1=0, rop=0xcc0020) returned 1 [0093.883] GdipReleaseDC (graphics=0x5608768, hdc=0x7d010823) returned 0x0 [0093.883] SelectPalette (hdc=0x50108bd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0093.883] SelectObject (hdc=0x7d010823, h=0x185000f) returned 0x520508d8 [0093.883] DeleteDC (hdc=0x7d010823) returned 1 [0093.883] GdipDeleteGraphics (graphics=0x5608768) returned 0x0 [0093.883] DeleteObject (ho=0x520508d8) returned 1 [0093.885] EndPaint (hWnd=0x102d4, lpPaint=0x119ed0c) returned 1 [0093.885] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.885] IsWindowUnicode (hWnd=0x102d6) returned 1 [0093.885] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.885] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.885] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.898] SendMessageW (hWnd=0x102d0, Msg=0x402, wParam=0x23, lParam=0x0) returned 0x64 [0093.898] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x402, wParam=0x23, lParam=0x0) returned 0x64 [0093.898] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0093.898] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x14, wParam=0xe010919, lParam=0x0) returned 0x1 [0093.898] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.898] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x84, wParam=0x0, lParam=0x154033d) returned 0x1 [0093.898] IsWindowUnicode (hWnd=0x102ba) returned 1 [0093.898] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.898] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.898] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.898] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0093.898] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.898] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x84, wParam=0x0, lParam=0x154033d) returned 0x1 [0093.898] IsWindowUnicode (hWnd=0x102ba) returned 1 [0093.898] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.898] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x84, wParam=0x0, lParam=0x154033d) returned 0x1 [0093.898] SetCursor (hCursor=0x10003) returned 0x10003 [0093.901] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.901] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.901] _TrackMouseEvent (in: lpEventTrack=0x2ee4af0 | out: lpEventTrack=0x2ee4af0) returned 1 [0093.901] SendMessageW (hWnd=0x102ba, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0093.901] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0093.901] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x200, wParam=0x0, lParam=0x5b0153) returned 0x0 [0093.901] GetKeyState (nVirtKey=1) returned 0 [0093.901] GetKeyState (nVirtKey=2) returned 1 [0093.901] GetKeyState (nVirtKey=4) returned 0 [0093.901] GetKeyState (nVirtKey=5) returned 0 [0093.901] GetKeyState (nVirtKey=6) returned 0 [0093.901] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.901] IsWindowUnicode (hWnd=0x202a6) returned 1 [0093.901] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.901] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.901] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.901] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.901] IsWindowUnicode (hWnd=0x102d6) returned 1 [0093.901] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.901] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.901] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.902] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0093.902] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0093.950] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.950] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x84, wParam=0x0, lParam=0x154033d) returned 0x1 [0093.950] IsWindowUnicode (hWnd=0x102ba) returned 1 [0093.950] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0093.950] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x84, wParam=0x0, lParam=0x154033d) returned 0x1 [0093.950] GetDlgItem (hDlg=0x30258, nIDDlgItem=0) returned 0x0 [0093.950] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x210, wParam=0x201, lParam=0xd202d2) returned 0x0 [0093.950] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x21, wParam=0x30258, lParam=0x2010001) returned 0x1 [0093.950] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x21, wParam=0x30258, lParam=0x2010001) returned 0x1 [0093.950] SetCursor (hCursor=0x10003) returned 0x10003 [0093.951] TranslateMessage (lpMsg=0x119f22c) returned 0 [0093.951] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0093.951] GetKeyState (nVirtKey=1) returned -127 [0093.951] GetKeyState (nVirtKey=2) returned 1 [0093.951] GetKeyState (nVirtKey=4) returned 0 [0093.951] GetKeyState (nVirtKey=5) returned 0 [0093.951] GetKeyState (nVirtKey=6) returned 0 [0093.951] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x201, wParam=0x1, lParam=0x5b0153) returned 0x0 [0093.951] GetKeyState (nVirtKey=1) returned -127 [0093.951] GetKeyState (nVirtKey=2) returned 1 [0093.951] GetKeyState (nVirtKey=4) returned 0 [0093.951] GetKeyState (nVirtKey=5) returned 0 [0093.951] GetKeyState (nVirtKey=6) returned 0 [0093.951] SetCapture (hWnd=0x102ba) returned 0x0 [0093.951] GetKeyState (nVirtKey=1) returned -127 [0093.951] GetKeyState (nVirtKey=2) returned 1 [0093.951] GetKeyState (nVirtKey=4) returned 0 [0093.951] GetKeyState (nVirtKey=5) returned 0 [0093.951] GetKeyState (nVirtKey=6) returned 0 [0093.951] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0093.951] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0093.951] WaitMessage () returned 1 [0094.008] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.008] IsWindowUnicode (hWnd=0x102d6) returned 1 [0094.008] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.008] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.008] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.008] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.008] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.008] WaitMessage () returned 1 [0094.044] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.044] IsWindowUnicode (hWnd=0x102ba) returned 1 [0094.044] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.044] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.044] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.044] MapWindowPoints (in: hWndFrom=0x102ba, hWndTo=0x0, lpPoints=0x2ee4e34, cPoints=0x1 | out: lpPoints=0x2ee4e34) returned 16318954 [0094.044] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x202, wParam=0x0, lParam=0x5b0153) returned 0x0 [0094.044] WindowFromPoint (Point=0x33d) returned 0x102ba [0094.044] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x84, wParam=0x0, lParam=0x154033d) returned 0x1 [0094.045] GetCapture () returned 0x102ba [0094.046] ReleaseCapture () returned 1 [0094.046] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0094.046] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.046] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x84, wParam=0x0, lParam=0x154033d) returned 0x1 [0094.046] IsWindowUnicode (hWnd=0x102ba) returned 1 [0094.046] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.046] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x84, wParam=0x0, lParam=0x154033d) returned 0x1 [0094.046] SetCursor (hCursor=0x10003) returned 0x10003 [0094.046] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.046] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.046] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x200, wParam=0x0, lParam=0x5b0153) returned 0x0 [0094.046] GetKeyState (nVirtKey=1) returned 1 [0094.046] GetKeyState (nVirtKey=2) returned 1 [0094.046] GetKeyState (nVirtKey=4) returned 0 [0094.046] GetKeyState (nVirtKey=5) returned 0 [0094.046] GetKeyState (nVirtKey=6) returned 0 [0094.046] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.046] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.046] WaitMessage () returned 1 [0094.118] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.118] IsWindowUnicode (hWnd=0x102d6) returned 1 [0094.118] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.118] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.118] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.118] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.118] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.118] WaitMessage () returned 1 [0094.150] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.150] IsWindowUnicode (hWnd=0x102ba) returned 1 [0094.150] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.150] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.150] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.150] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.150] IsWindowUnicode (hWnd=0x102ba) returned 1 [0094.150] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.150] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.150] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.150] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x2a1, wParam=0x0, lParam=0x5b0153) returned 0x0 [0094.150] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.151] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.151] WaitMessage () returned 1 [0094.228] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.228] IsWindowUnicode (hWnd=0x102d6) returned 1 [0094.229] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.229] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.229] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.229] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.229] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.229] WaitMessage () returned 1 [0094.336] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.336] IsWindowUnicode (hWnd=0x102d6) returned 1 [0094.336] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.336] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.336] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.336] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.336] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.336] WaitMessage () returned 1 [0094.348] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.348] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.348] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.348] IsWindowUnicode (hWnd=0x102ba) returned 1 [0094.348] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.349] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.349] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.349] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0094.349] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.349] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.349] WaitMessage () returned 1 [0094.446] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.446] IsWindowUnicode (hWnd=0x102d6) returned 1 [0094.446] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.446] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.446] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.446] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.447] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.447] WaitMessage () returned 1 [0094.555] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.555] IsWindowUnicode (hWnd=0x102d6) returned 1 [0094.555] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.555] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.555] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.555] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.555] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.555] WaitMessage () returned 1 [0094.665] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.665] IsWindowUnicode (hWnd=0x102d6) returned 1 [0094.665] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.665] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.665] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.665] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.665] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.665] WaitMessage () returned 1 [0094.774] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.774] IsWindowUnicode (hWnd=0x102d6) returned 1 [0094.774] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.774] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.774] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.774] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.774] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.774] WaitMessage () returned 1 [0094.804] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.804] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0094.805] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0094.805] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0094.805] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0094.805] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x1c, wParam=0x0, lParam=0x9e8) returned 0x0 [0094.805] NtdllDefWindowProc_W (hWnd=0x30254, Msg=0x1c, wParam=0x0, lParam=0x9e8) returned 0x0 [0094.805] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0094.806] GetStockObject (i=5) returned 0x1900015 [0094.806] GetDlgItem (hDlg=0x30258, nIDDlgItem=66260) returned 0x102d4 [0094.806] SendMessageW (hWnd=0x102d4, Msg=0x202b, wParam=0x102d4, lParam=0x119eb6c) returned 0x0 [0094.806] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x202b, wParam=0x102d4, lParam=0x119eb6c) returned 0x0 [0094.806] GetCapture () returned 0x0 [0094.806] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0094.806] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0094.806] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0094.806] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0094.806] IsWindowUnicode (hWnd=0x102d4) returned 1 [0094.806] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.806] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.806] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.806] BeginPaint (in: hWnd=0x102d4, lpPaint=0x119ed10 | out: lpPaint=0x119ed10) returned 0x50108bd [0094.806] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0094.806] CreateCompatibleDC (hdc=0x50108bd) returned 0x560108d8 [0094.806] GetObjectType (h=0x50108bd) returned 0x3 [0094.806] CreateCompatibleBitmap (hdc=0x50108bd, cx=1, cy=1) returned 0x5405085d [0094.806] GetDIBits (in: hdc=0x50108bd, hbm=0x5405085d, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0094.806] GetDIBits (in: hdc=0x50108bd, hbm=0x5405085d, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0094.807] DeleteObject (ho=0x5405085d) returned 1 [0094.807] CreateDIBSection (in: hdc=0x50108bd, lpbmi=0x119e7f0, usage=0x0, ppvBits=0x119ece4, hSection=0x0, offset=0x0 | out: ppvBits=0x119ece4) returned 0x7f050823 [0094.807] SelectObject (hdc=0x560108d8, h=0x7f050823) returned 0x185000f [0094.807] GdipCreateFromHDC (hdc=0x560108d8, graphics=0x119ecc8) returned 0x0 [0094.807] GdipTranslateWorldTransform (graphics=0x5608768, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0094.807] GdipSetClipRectI (graphics=0x5608768, x=0, y=0, width=711, height=36, combineMode=0x0) returned 0x0 [0094.807] GdipCreateMatrix (matrix=0x119ed70) returned 0x0 [0094.807] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608b78) returned 0x0 [0094.807] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119ed88) returned 0x0 [0094.807] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0094.807] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x15d6520) returned 0x0 [0094.807] LocalFree (hMem=0x15d6520) returned 0x0 [0094.807] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0094.807] GdipCreateRegion (region=0x119ed70) returned 0x0 [0094.807] GdipGetClip (graphics=0x5608768, region=0x56034a8) returned 0x0 [0094.807] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ed7c) returned 0x0 [0094.807] GdipSaveGraphics (graphics=0x5608768, state=0x119eda8) returned 0x0 [0094.807] GdipRestoreGraphics (graphics=0x5608768, state=0xfd880dbd) returned 0x0 [0094.807] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0094.807] GdipGetDC (graphics=0x5608768, hdc=0x119eaf8) returned 0x0 [0094.807] GetCurrentObject (hdc=0x560108d8, type=0x1) returned 0x1b00017 [0094.807] GetCurrentObject (hdc=0x560108d8, type=0x2) returned 0x1900010 [0094.807] GetCurrentObject (hdc=0x560108d8, type=0x7) returned 0x7f050823 [0094.807] GetCurrentObject (hdc=0x560108d8, type=0x6) returned 0x18a0048 [0094.807] SaveDC (hdc=0x560108d8) returned 1 [0094.807] GetNearestColor (hdc=0x560108d8, color=0xc0) returned 0xc0 [0094.807] GetNearestColor (hdc=0x560108d8, color=0x40) returned 0x40 [0094.807] GetNearestColor (hdc=0x560108d8, color=0x0) returned 0x0 [0094.807] GetNearestColor (hdc=0x560108d8, color=0x5656e5) returned 0x5656e5 [0094.807] GetNearestColor (hdc=0x560108d8, color=0x0) returned 0x0 [0094.808] GetNearestColor (hdc=0x560108d8, color=0x6060ff) returned 0x6060ff [0094.808] GetNearestColor (hdc=0x560108d8, color=0x5656e5) returned 0x5656e5 [0094.808] GetNearestColor (hdc=0x560108d8, color=0xe6) returned 0xe6 [0094.808] GetNearestColor (hdc=0x560108d8, color=0x0) returned 0x0 [0094.808] RestoreDC (hdc=0x560108d8, nSavedDC=-1) returned 1 [0094.808] GdipReleaseDC (graphics=0x5608768, hdc=0x560108d8) returned 0x0 [0094.808] DrawTextExW (in: hdc=0x490108ba, lpchText="Decrypt", cchText=7, lprc=0x119e99c, format=0x102415, lpdtp=0x2ee6eec | out: lpchText="Decrypt", lprc=0x119e99c) returned 13 [0094.808] GdipCreateRegion (region=0x119e9f0) returned 0x0 [0094.808] GdipGetClip (graphics=0x5608768, region=0x56034a8) returned 0x0 [0094.808] GdipCreateMatrix (matrix=0x119e9f0) returned 0x0 [0094.808] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608ba8) returned 0x0 [0094.808] GdipIsMatrixIdentity (matrix=0x5608ba8, result=0x119ea08) returned 0x0 [0094.808] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0094.808] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6050) returned 0x0 [0094.808] LocalFree (hMem=0x15d6050) returned 0x0 [0094.808] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0094.808] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6520) returned 0x0 [0094.808] LocalFree (hMem=0x15d6520) returned 0x0 [0094.808] GdipDeleteMatrix (matrix=0x5608ba8) returned 0x0 [0094.808] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ea34) returned 0x0 [0094.808] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ea24) returned 0x0 [0094.808] GdipGetRegionHRgn (region=0x56034a8, graphics=0x5608768, hRgn=0x119ea24) returned 0x0 [0094.808] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0094.808] GdipGetDC (graphics=0x5608768, hdc=0x119ea3c) returned 0x0 [0094.808] GetCurrentObject (hdc=0x560108d8, type=0x1) returned 0x1b00017 [0094.808] GetCurrentObject (hdc=0x560108d8, type=0x2) returned 0x1900010 [0094.808] GetCurrentObject (hdc=0x560108d8, type=0x7) returned 0x7f050823 [0094.808] GetCurrentObject (hdc=0x560108d8, type=0x6) returned 0x18a0048 [0094.808] SaveDC (hdc=0x560108d8) returned 1 [0094.808] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6d040894 [0094.808] GetClipRgn (hdc=0x560108d8, hrgn=0x6d040894) returned 0 [0094.808] SelectClipRgn (hdc=0x560108d8, hrgn=0x610408c1) returned 2 [0094.808] DeleteObject (ho=0x6d040894) returned 1 [0094.808] DeleteObject (ho=0x610408c1) returned 1 [0094.809] OffsetViewportOrgEx (in: hdc=0x560108d8, x=0, y=0, lppt=0x2ee70e4 | out: lppt=0x2ee70e4) returned 1 [0094.809] GetNearestColor (hdc=0x560108d8, color=0xc0) returned 0xc0 [0094.809] CreateSolidBrush (color=0xc0) returned 0x4110086a [0094.809] FillRect (hDC=0x560108d8, lprc=0x119ea40, hbr=0x4110086a) returned 1 [0094.809] DeleteObject (ho=0x4110086a) returned 1 [0094.809] RestoreDC (hdc=0x560108d8, nSavedDC=-1) returned 1 [0094.809] GdipReleaseDC (graphics=0x5608768, hdc=0x560108d8) returned 0x0 [0094.809] GdipGetTextRenderingHint (graphics=0x5608768, mode=0x119eabc) returned 0x0 [0094.809] GdipGetDC (graphics=0x5608768, hdc=0x119eaa8) returned 0x0 [0094.809] GetCurrentObject (hdc=0x560108d8, type=0x1) returned 0x1b00017 [0094.809] GetCurrentObject (hdc=0x560108d8, type=0x2) returned 0x1900010 [0094.809] GetCurrentObject (hdc=0x560108d8, type=0x7) returned 0x7f050823 [0094.809] GetCurrentObject (hdc=0x560108d8, type=0x6) returned 0x18a0048 [0094.809] SaveDC (hdc=0x560108d8) returned 1 [0094.809] GetTextAlign (hdc=0x560108d8) returned 0x0 [0094.809] GetTextColor (hdc=0x560108d8) returned 0x0 [0094.809] GetCurrentObject (hdc=0x560108d8, type=0x6) returned 0x18a0048 [0094.809] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e808 | out: pv=0x119e808) returned 92 [0094.809] SelectObject (hdc=0x560108d8, h=0xb20a08b8) returned 0x18a0048 [0094.809] GetBkMode (hdc=0x560108d8) returned 2 [0094.809] SetBkMode (hdc=0x560108d8, mode=1) returned 2 [0094.810] DrawTextExW (in: hdc=0x560108d8, lpchText="Decrypt", cchText=7, lprc=0x119e8ec, format=0x102415, lpdtp=0x2ee7344 | out: lpchText="Decrypt", lprc=0x119e8ec) returned 13 [0094.810] DrawTextExW (in: hdc=0x560108d8, lpchText="Decrypt", cchText=7, lprc=0x119ea3c, format=0x102015, lpdtp=0x2ee7344 | out: lpchText="Decrypt", lprc=0x119ea3c) returned 13 [0094.810] RestoreDC (hdc=0x560108d8, nSavedDC=-1) returned 1 [0094.810] GdipReleaseDC (graphics=0x5608768, hdc=0x560108d8) returned 0x0 [0094.810] GetFocus () returned 0x0 [0094.810] GetFocus () returned 0x0 [0094.810] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb40) returned 0x0 [0094.810] GdipDrawRectangleI (graphics=0x5608768, pen=0x5603418, x=0, y=0, width=710, height=35) returned 0x0 [0094.810] GdipDeletePen (pen=0x5603418) returned 0x0 [0094.810] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb20) returned 0x0 [0094.810] GdipDrawRectangleI (graphics=0x5608768, pen=0x5603418, x=1, y=1, width=708, height=33) returned 0x0 [0094.810] GdipDeletePen (pen=0x5603418) returned 0x0 [0094.810] GdipGetDC (graphics=0x5608768, hdc=0x119ed68) returned 0x0 [0094.810] BitBlt (hdc=0x50108bd, x=0, y=0, cx=711, cy=36, hdcSrc=0x560108d8, x1=0, y1=0, rop=0xcc0020) returned 1 [0094.810] GdipReleaseDC (graphics=0x5608768, hdc=0x560108d8) returned 0x0 [0094.810] SelectPalette (hdc=0x50108bd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0094.810] SelectObject (hdc=0x560108d8, h=0x185000f) returned 0x7f050823 [0094.810] DeleteDC (hdc=0x560108d8) returned 1 [0094.810] GdipDeleteGraphics (graphics=0x5608768) returned 0x0 [0094.810] DeleteObject (ho=0x7f050823) returned 1 [0094.811] EndPaint (hWnd=0x102d4, lpPaint=0x119ed0c) returned 1 [0094.811] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.811] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.811] WaitMessage () returned 1 [0094.885] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.885] IsWindowUnicode (hWnd=0x102d6) returned 1 [0094.885] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.885] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.885] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.886] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.886] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.886] WaitMessage () returned 1 [0094.994] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.995] IsWindowUnicode (hWnd=0x102d6) returned 1 [0094.995] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0094.995] TranslateMessage (lpMsg=0x119f22c) returned 0 [0094.995] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0094.995] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.995] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0094.995] WaitMessage () returned 1 [0095.103] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.103] IsWindowUnicode (hWnd=0x102d6) returned 1 [0095.103] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.103] TranslateMessage (lpMsg=0x119f22c) returned 0 [0095.103] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0095.103] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.104] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.104] WaitMessage () returned 1 [0095.134] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.134] IsWindowUnicode (hWnd=0x202a6) returned 1 [0095.134] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.134] TranslateMessage (lpMsg=0x119f22c) returned 0 [0095.134] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0095.134] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.134] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.134] WaitMessage () returned 1 [0095.213] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.214] IsWindowUnicode (hWnd=0x102d6) returned 1 [0095.214] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.214] TranslateMessage (lpMsg=0x119f22c) returned 0 [0095.214] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0095.214] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.214] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.214] WaitMessage () returned 1 [0095.322] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.322] IsWindowUnicode (hWnd=0x102d6) returned 1 [0095.322] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.322] TranslateMessage (lpMsg=0x119f22c) returned 0 [0095.322] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0095.322] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.322] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.323] WaitMessage () returned 1 [0095.433] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.433] IsWindowUnicode (hWnd=0x102d6) returned 1 [0095.433] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.433] TranslateMessage (lpMsg=0x119f22c) returned 0 [0095.433] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0095.433] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.433] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.433] WaitMessage () returned 1 [0095.541] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.541] IsWindowUnicode (hWnd=0x102d6) returned 1 [0095.541] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.541] TranslateMessage (lpMsg=0x119f22c) returned 0 [0095.541] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0095.541] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.541] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.541] WaitMessage () returned 1 [0095.650] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.650] IsWindowUnicode (hWnd=0x102d6) returned 1 [0095.650] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.651] TranslateMessage (lpMsg=0x119f22c) returned 0 [0095.651] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0095.651] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.651] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.651] WaitMessage () returned 1 [0095.759] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.759] IsWindowUnicode (hWnd=0x102d6) returned 1 [0095.759] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.760] TranslateMessage (lpMsg=0x119f22c) returned 0 [0095.760] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0095.760] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.760] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.760] WaitMessage () returned 1 [0095.870] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.871] IsWindowUnicode (hWnd=0x102d6) returned 1 [0095.871] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.871] TranslateMessage (lpMsg=0x119f22c) returned 0 [0095.871] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0095.871] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.871] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.871] WaitMessage () returned 1 [0095.977] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.977] IsWindowUnicode (hWnd=0x102d6) returned 1 [0095.977] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0095.977] TranslateMessage (lpMsg=0x119f22c) returned 0 [0095.977] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0095.977] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.977] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0095.977] WaitMessage () returned 1 [0096.086] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.087] IsWindowUnicode (hWnd=0x102d6) returned 1 [0096.087] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.087] TranslateMessage (lpMsg=0x119f22c) returned 0 [0096.087] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0096.087] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.087] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.087] WaitMessage () returned 1 [0096.196] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.196] IsWindowUnicode (hWnd=0x102d6) returned 1 [0096.196] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.196] TranslateMessage (lpMsg=0x119f22c) returned 0 [0096.196] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0096.197] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.197] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.197] WaitMessage () returned 1 [0096.306] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.307] IsWindowUnicode (hWnd=0x102d6) returned 1 [0096.307] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.307] TranslateMessage (lpMsg=0x119f22c) returned 0 [0096.307] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0096.307] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.307] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.307] WaitMessage () returned 1 [0096.416] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.416] IsWindowUnicode (hWnd=0x102d6) returned 1 [0096.416] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.416] TranslateMessage (lpMsg=0x119f22c) returned 0 [0096.416] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0096.417] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.417] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.417] WaitMessage () returned 1 [0096.525] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.525] IsWindowUnicode (hWnd=0x102d6) returned 1 [0096.525] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.525] TranslateMessage (lpMsg=0x119f22c) returned 0 [0096.525] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0096.525] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.525] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.525] WaitMessage () returned 1 [0096.633] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.634] IsWindowUnicode (hWnd=0x102d6) returned 1 [0096.634] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.634] TranslateMessage (lpMsg=0x119f22c) returned 0 [0096.634] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0096.634] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.634] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.634] WaitMessage () returned 1 [0096.745] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.745] IsWindowUnicode (hWnd=0x102d6) returned 1 [0096.745] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.745] TranslateMessage (lpMsg=0x119f22c) returned 0 [0096.745] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0096.746] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.746] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.746] WaitMessage () returned 1 [0096.853] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.853] IsWindowUnicode (hWnd=0x102d6) returned 1 [0096.853] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.853] TranslateMessage (lpMsg=0x119f22c) returned 0 [0096.853] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0096.854] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.854] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.854] WaitMessage () returned 1 [0096.962] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.962] IsWindowUnicode (hWnd=0x102d6) returned 1 [0096.962] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0096.962] TranslateMessage (lpMsg=0x119f22c) returned 0 [0096.962] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0096.962] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.962] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0096.962] WaitMessage () returned 1 [0097.072] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.072] IsWindowUnicode (hWnd=0x102d6) returned 1 [0097.072] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.072] TranslateMessage (lpMsg=0x119f22c) returned 0 [0097.072] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0097.072] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.072] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.072] WaitMessage () returned 1 [0097.180] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.180] IsWindowUnicode (hWnd=0x102d6) returned 1 [0097.180] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.180] TranslateMessage (lpMsg=0x119f22c) returned 0 [0097.180] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0097.180] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.180] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.180] WaitMessage () returned 1 [0097.290] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.290] IsWindowUnicode (hWnd=0x102d6) returned 1 [0097.290] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.290] TranslateMessage (lpMsg=0x119f22c) returned 0 [0097.290] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0097.291] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.291] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.291] WaitMessage () returned 1 [0097.399] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.399] IsWindowUnicode (hWnd=0x102d6) returned 1 [0097.399] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.400] TranslateMessage (lpMsg=0x119f22c) returned 0 [0097.400] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0097.400] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.400] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.400] WaitMessage () returned 1 [0097.509] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.510] IsWindowUnicode (hWnd=0x102d6) returned 1 [0097.510] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.510] TranslateMessage (lpMsg=0x119f22c) returned 0 [0097.510] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0097.510] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.510] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.510] WaitMessage () returned 1 [0097.618] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.618] IsWindowUnicode (hWnd=0x102d6) returned 1 [0097.618] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.618] TranslateMessage (lpMsg=0x119f22c) returned 0 [0097.618] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0097.618] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.618] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.618] WaitMessage () returned 1 [0097.727] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.727] IsWindowUnicode (hWnd=0x102d6) returned 1 [0097.727] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.727] TranslateMessage (lpMsg=0x119f22c) returned 0 [0097.727] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0097.728] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.728] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.728] WaitMessage () returned 1 [0097.841] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.841] IsWindowUnicode (hWnd=0x102d6) returned 1 [0097.841] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.841] TranslateMessage (lpMsg=0x119f22c) returned 0 [0097.841] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0097.841] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.841] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.841] WaitMessage () returned 1 [0097.946] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.946] IsWindowUnicode (hWnd=0x102d6) returned 1 [0097.946] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0097.946] TranslateMessage (lpMsg=0x119f22c) returned 0 [0097.946] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0097.946] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.946] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0097.946] WaitMessage () returned 1 [0098.056] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.056] IsWindowUnicode (hWnd=0x102d6) returned 1 [0098.056] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.056] TranslateMessage (lpMsg=0x119f22c) returned 0 [0098.056] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0098.057] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.057] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.057] WaitMessage () returned 1 [0098.166] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.166] IsWindowUnicode (hWnd=0x102d6) returned 1 [0098.166] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.166] TranslateMessage (lpMsg=0x119f22c) returned 0 [0098.166] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0098.166] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.166] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.166] WaitMessage () returned 1 [0098.275] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.275] IsWindowUnicode (hWnd=0x102d6) returned 1 [0098.275] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.275] TranslateMessage (lpMsg=0x119f22c) returned 0 [0098.275] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0098.275] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.275] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.275] WaitMessage () returned 1 [0098.384] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.384] IsWindowUnicode (hWnd=0x102d6) returned 1 [0098.384] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.385] TranslateMessage (lpMsg=0x119f22c) returned 0 [0098.385] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0098.385] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.385] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.385] WaitMessage () returned 1 [0098.493] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.493] IsWindowUnicode (hWnd=0x102d6) returned 1 [0098.493] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.493] TranslateMessage (lpMsg=0x119f22c) returned 0 [0098.493] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0098.493] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.493] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.493] WaitMessage () returned 1 [0098.602] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.602] IsWindowUnicode (hWnd=0x102d6) returned 1 [0098.602] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.602] TranslateMessage (lpMsg=0x119f22c) returned 0 [0098.602] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0098.602] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.602] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.602] WaitMessage () returned 1 [0098.712] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.712] IsWindowUnicode (hWnd=0x102d6) returned 1 [0098.712] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.713] TranslateMessage (lpMsg=0x119f22c) returned 0 [0098.713] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0098.713] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.713] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.713] WaitMessage () returned 1 [0098.822] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.822] IsWindowUnicode (hWnd=0x102d6) returned 1 [0098.822] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.822] TranslateMessage (lpMsg=0x119f22c) returned 0 [0098.822] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0098.822] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.822] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.822] WaitMessage () returned 1 [0098.931] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.931] IsWindowUnicode (hWnd=0x102d6) returned 1 [0098.931] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0098.931] TranslateMessage (lpMsg=0x119f22c) returned 0 [0098.931] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0098.932] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.932] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0098.932] WaitMessage () returned 1 [0099.040] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.040] IsWindowUnicode (hWnd=0x102d6) returned 1 [0099.040] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.040] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.040] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.040] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.040] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.041] WaitMessage () returned 1 [0099.151] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.151] IsWindowUnicode (hWnd=0x102d6) returned 1 [0099.151] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.151] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.151] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.151] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.151] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.151] WaitMessage () returned 1 [0099.259] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.259] IsWindowUnicode (hWnd=0x102d6) returned 1 [0099.259] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.259] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.260] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.260] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.260] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.260] WaitMessage () returned 1 [0099.370] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.370] IsWindowUnicode (hWnd=0x102d6) returned 1 [0099.370] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.370] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.370] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.370] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.370] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.370] WaitMessage () returned 1 [0099.478] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.478] IsWindowUnicode (hWnd=0x102d6) returned 1 [0099.478] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.478] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.478] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.481] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.482] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.482] WaitMessage () returned 1 [0099.485] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.485] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x84, wParam=0x0, lParam=0x15602f3) returned 0x1 [0099.485] IsWindowUnicode (hWnd=0x102ba) returned 1 [0099.485] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.486] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x84, wParam=0x0, lParam=0x15602f3) returned 0x1 [0099.486] SetCursor (hCursor=0x10003) returned 0x10003 [0099.486] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.486] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.486] _TrackMouseEvent (in: lpEventTrack=0x2ee4af0 | out: lpEventTrack=0x2ee4af0) returned 1 [0099.486] SendMessageW (hWnd=0x102ba, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0099.486] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0099.487] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x200, wParam=0x0, lParam=0x5d0109) returned 0x0 [0099.487] GetKeyState (nVirtKey=1) returned 1 [0099.487] GetKeyState (nVirtKey=2) returned 1 [0099.487] GetKeyState (nVirtKey=4) returned 0 [0099.487] GetKeyState (nVirtKey=5) returned 0 [0099.487] GetKeyState (nVirtKey=6) returned 0 [0099.487] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.487] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.487] WaitMessage () returned 1 [0099.590] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.590] IsWindowUnicode (hWnd=0x102ba) returned 1 [0099.590] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.590] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.590] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.590] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.590] IsWindowUnicode (hWnd=0x102ba) returned 1 [0099.590] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.590] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.590] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.590] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x2a1, wParam=0x0, lParam=0x5d0109) returned 0x0 [0099.590] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.590] IsWindowUnicode (hWnd=0x102d6) returned 1 [0099.590] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.590] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.590] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.590] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.590] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.590] WaitMessage () returned 1 [0099.630] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.630] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x15d02f2) returned 0x1 [0099.630] IsWindowUnicode (hWnd=0x102c6) returned 1 [0099.630] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.630] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.630] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.630] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0099.630] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.630] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x15d02f2) returned 0x1 [0099.630] IsWindowUnicode (hWnd=0x102c6) returned 1 [0099.630] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.630] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x15d02f2) returned 0x1 [0099.630] SetCursor (hCursor=0x10003) returned 0x10003 [0099.630] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.630] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.630] _TrackMouseEvent (in: lpEventTrack=0x2eeb224 | out: lpEventTrack=0x2eeb224) returned 1 [0099.631] SendMessageW (hWnd=0x102c6, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0099.631] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0099.631] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x200, wParam=0x0, lParam=0x27b) returned 0x0 [0099.631] GetKeyState (nVirtKey=1) returned 1 [0099.631] GetKeyState (nVirtKey=2) returned 1 [0099.631] GetKeyState (nVirtKey=4) returned 0 [0099.631] GetKeyState (nVirtKey=5) returned 0 [0099.631] GetKeyState (nVirtKey=6) returned 0 [0099.631] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.631] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.631] WaitMessage () returned 1 [0099.682] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.682] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x15f02f2) returned 0x1 [0099.682] IsWindowUnicode (hWnd=0x102c6) returned 1 [0099.682] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.682] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x15f02f2) returned 0x1 [0099.682] SetCursor (hCursor=0x10003) returned 0x10003 [0099.682] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.682] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.682] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x200, wParam=0x0, lParam=0x2027b) returned 0x0 [0099.682] GetKeyState (nVirtKey=1) returned 1 [0099.682] GetKeyState (nVirtKey=2) returned 1 [0099.682] GetKeyState (nVirtKey=4) returned 0 [0099.682] GetKeyState (nVirtKey=5) returned 0 [0099.682] GetKeyState (nVirtKey=6) returned 0 [0099.682] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.682] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.682] WaitMessage () returned 1 [0099.696] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.696] IsWindowUnicode (hWnd=0x102d6) returned 1 [0099.696] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.696] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.696] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.696] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.696] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.696] WaitMessage () returned 1 [0099.714] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.714] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x16302f2) returned 0x1 [0099.714] IsWindowUnicode (hWnd=0x102c6) returned 1 [0099.714] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.714] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x16302f2) returned 0x1 [0099.715] SetCursor (hCursor=0x10003) returned 0x10003 [0099.715] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.715] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.715] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x200, wParam=0x0, lParam=0x6027b) returned 0x0 [0099.715] GetKeyState (nVirtKey=1) returned 1 [0099.715] GetKeyState (nVirtKey=2) returned 1 [0099.715] GetKeyState (nVirtKey=4) returned 0 [0099.715] GetKeyState (nVirtKey=5) returned 0 [0099.715] GetKeyState (nVirtKey=6) returned 0 [0099.715] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.715] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.715] WaitMessage () returned 1 [0099.742] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.742] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x16502f2) returned 0x1 [0099.742] IsWindowUnicode (hWnd=0x102c6) returned 1 [0099.742] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.742] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x16502f2) returned 0x1 [0099.742] SetCursor (hCursor=0x10003) returned 0x10003 [0099.742] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.742] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.742] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x200, wParam=0x0, lParam=0x8027b) returned 0x0 [0099.742] GetKeyState (nVirtKey=1) returned 1 [0099.742] GetKeyState (nVirtKey=2) returned 1 [0099.742] GetKeyState (nVirtKey=4) returned 0 [0099.742] GetKeyState (nVirtKey=5) returned 0 [0099.742] GetKeyState (nVirtKey=6) returned 0 [0099.742] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.742] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.742] WaitMessage () returned 1 [0099.771] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.771] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x16602f2) returned 0x1 [0099.771] IsWindowUnicode (hWnd=0x102c6) returned 1 [0099.771] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.771] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x16602f2) returned 0x1 [0099.771] SetCursor (hCursor=0x10003) returned 0x10003 [0099.771] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.771] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.771] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x200, wParam=0x0, lParam=0x9027b) returned 0x0 [0099.771] GetKeyState (nVirtKey=1) returned 1 [0099.771] GetKeyState (nVirtKey=2) returned 1 [0099.771] GetKeyState (nVirtKey=4) returned 0 [0099.771] GetKeyState (nVirtKey=5) returned 0 [0099.771] GetKeyState (nVirtKey=6) returned 0 [0099.771] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.771] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.771] WaitMessage () returned 1 [0099.801] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.801] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x16c0308) returned 0x1 [0099.801] IsWindowUnicode (hWnd=0x102c6) returned 1 [0099.801] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.801] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x16c0308) returned 0x1 [0099.801] SetCursor (hCursor=0x10003) returned 0x10003 [0099.801] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.801] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.801] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x200, wParam=0x0, lParam=0xf0291) returned 0x0 [0099.801] GetKeyState (nVirtKey=1) returned 1 [0099.801] GetKeyState (nVirtKey=2) returned 1 [0099.801] GetKeyState (nVirtKey=4) returned 0 [0099.801] GetKeyState (nVirtKey=5) returned 0 [0099.801] GetKeyState (nVirtKey=6) returned 0 [0099.802] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.802] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.802] WaitMessage () returned 1 [0099.805] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.805] IsWindowUnicode (hWnd=0x102d6) returned 1 [0099.805] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.805] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.805] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.806] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.806] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.806] WaitMessage () returned 1 [0099.834] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.834] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x16d031f) returned 0x1 [0099.834] IsWindowUnicode (hWnd=0x102c6) returned 1 [0099.835] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.835] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x16d031f) returned 0x1 [0099.835] SetCursor (hCursor=0x10003) returned 0x10003 [0099.835] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.835] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.835] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x200, wParam=0x0, lParam=0x1002a8) returned 0x0 [0099.835] GetKeyState (nVirtKey=1) returned 1 [0099.835] GetKeyState (nVirtKey=2) returned 1 [0099.836] GetKeyState (nVirtKey=4) returned 0 [0099.836] GetKeyState (nVirtKey=5) returned 0 [0099.836] GetKeyState (nVirtKey=6) returned 0 [0099.836] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.836] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.836] WaitMessage () returned 1 [0099.864] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.864] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x16d0325) returned 0x1 [0099.864] IsWindowUnicode (hWnd=0x102c6) returned 1 [0099.864] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.864] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x16d0325) returned 0x1 [0099.865] SetCursor (hCursor=0x10003) returned 0x10003 [0099.865] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.865] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.865] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x200, wParam=0x0, lParam=0x1002ae) returned 0x0 [0099.865] GetKeyState (nVirtKey=1) returned 1 [0099.865] GetKeyState (nVirtKey=2) returned 1 [0099.865] GetKeyState (nVirtKey=4) returned 0 [0099.865] GetKeyState (nVirtKey=5) returned 0 [0099.865] GetKeyState (nVirtKey=6) returned 0 [0099.865] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.866] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.866] WaitMessage () returned 1 [0099.896] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.896] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x16d0326) returned 0x1 [0099.896] IsWindowUnicode (hWnd=0x102c6) returned 1 [0099.896] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.896] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x16d0326) returned 0x1 [0099.896] SetCursor (hCursor=0x10003) returned 0x10003 [0099.896] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.897] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.898] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x200, wParam=0x0, lParam=0x1002af) returned 0x0 [0099.898] GetKeyState (nVirtKey=1) returned 1 [0099.898] GetKeyState (nVirtKey=2) returned 1 [0099.898] GetKeyState (nVirtKey=4) returned 0 [0099.898] GetKeyState (nVirtKey=5) returned 0 [0099.898] GetKeyState (nVirtKey=6) returned 0 [0099.898] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.898] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.898] WaitMessage () returned 1 [0099.926] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.926] IsWindowUnicode (hWnd=0x102d6) returned 1 [0099.927] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.927] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.927] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.927] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.927] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.927] WaitMessage () returned 1 [0099.964] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.964] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x1720324) returned 0x1 [0099.964] IsWindowUnicode (hWnd=0x102c6) returned 1 [0099.964] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.964] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x1720324) returned 0x1 [0099.965] SetCursor (hCursor=0x10003) returned 0x10003 [0099.965] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.965] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.965] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x200, wParam=0x8, lParam=0x1502ad) returned 0x0 [0099.965] GetKeyState (nVirtKey=1) returned 1 [0099.965] GetKeyState (nVirtKey=2) returned 1 [0099.965] GetKeyState (nVirtKey=4) returned 0 [0099.965] GetKeyState (nVirtKey=5) returned 0 [0099.965] GetKeyState (nVirtKey=6) returned 0 [0099.965] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.966] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0099.966] WaitMessage () returned 1 [0099.986] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.986] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x84, wParam=0x0, lParam=0x18a02f9) returned 0x1 [0099.986] IsWindowUnicode (hWnd=0x102ca) returned 1 [0099.986] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.987] TranslateMessage (lpMsg=0x119f22c) returned 0 [0099.987] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0099.987] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0099.987] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.987] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x84, wParam=0x0, lParam=0x18a02f9) returned 0x1 [0099.987] IsWindowUnicode (hWnd=0x102ca) returned 1 [0099.987] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0099.987] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x84, wParam=0x0, lParam=0x18a02f9) returned 0x1 [0100.000] LoadCursorW (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005 [0100.000] SetCursor (hCursor=0x10005) returned 0x10003 [0100.001] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.001] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0100.001] _TrackMouseEvent (in: lpEventTrack=0x2eeb910 | out: lpEventTrack=0x2eeb910) returned 1 [0100.001] SendMessageW (hWnd=0x102ca, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0100.001] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0100.001] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x200, wParam=0x8, lParam=0xb027a) returned 0x1 [0100.001] GetKeyState (nVirtKey=1) returned 1 [0100.001] GetKeyState (nVirtKey=2) returned 1 [0100.001] GetKeyState (nVirtKey=4) returned 0 [0100.001] GetKeyState (nVirtKey=5) returned 0 [0100.001] GetKeyState (nVirtKey=6) returned 0 [0100.002] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.002] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.002] WaitMessage () returned 1 [0100.016] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.016] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x84, wParam=0x0, lParam=0x18e02eb) returned 0x1 [0100.016] IsWindowUnicode (hWnd=0x102ca) returned 1 [0100.016] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.016] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x84, wParam=0x0, lParam=0x18e02eb) returned 0x1 [0100.017] SetCursor (hCursor=0x10005) returned 0x10005 [0100.017] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.017] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0100.017] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x200, wParam=0x0, lParam=0xf026c) returned 0x1 [0100.017] GetKeyState (nVirtKey=1) returned 1 [0100.017] GetKeyState (nVirtKey=2) returned 1 [0100.017] GetKeyState (nVirtKey=4) returned 0 [0100.017] GetKeyState (nVirtKey=5) returned 0 [0100.017] GetKeyState (nVirtKey=6) returned 0 [0100.017] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.018] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.018] WaitMessage () returned 1 [0100.036] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.036] IsWindowUnicode (hWnd=0x102d6) returned 1 [0100.036] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.036] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.036] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.037] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.037] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.037] WaitMessage () returned 1 [0100.043] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.043] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x19f0298) returned 0x1 [0100.044] IsWindowUnicode (hWnd=0x202a8) returned 1 [0100.044] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.044] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.044] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.044] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0100.044] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.044] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x19f0298) returned 0x1 [0100.045] IsWindowUnicode (hWnd=0x202a8) returned 1 [0100.045] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.045] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x19f0298) returned 0x1 [0100.045] SetCursor (hCursor=0x10003) returned 0x10005 [0100.046] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.046] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.046] _TrackMouseEvent (in: lpEventTrack=0x2eebb04 | out: lpEventTrack=0x2eebb04) returned 1 [0100.046] SendMessageW (hWnd=0x202a8, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0100.046] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0100.046] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x200, wParam=0x0, lParam=0x21f) returned 0x0 [0100.046] GetKeyState (nVirtKey=1) returned 1 [0100.046] GetKeyState (nVirtKey=2) returned 1 [0100.046] GetKeyState (nVirtKey=4) returned 0 [0100.046] GetKeyState (nVirtKey=5) returned 0 [0100.046] GetKeyState (nVirtKey=6) returned 0 [0100.046] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.047] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.047] WaitMessage () returned 1 [0100.073] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.073] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1a00282) returned 0x1 [0100.074] IsWindowUnicode (hWnd=0x202a8) returned 1 [0100.074] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.074] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1a00282) returned 0x1 [0100.074] SetCursor (hCursor=0x10003) returned 0x10003 [0100.074] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.074] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.074] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x200, wParam=0x0, lParam=0x10209) returned 0x0 [0100.074] GetKeyState (nVirtKey=1) returned 1 [0100.074] GetKeyState (nVirtKey=2) returned 1 [0100.075] GetKeyState (nVirtKey=4) returned 0 [0100.075] GetKeyState (nVirtKey=5) returned 0 [0100.075] GetKeyState (nVirtKey=6) returned 0 [0100.075] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.075] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.075] WaitMessage () returned 1 [0100.103] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.103] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1a30226) returned 0x1 [0100.103] IsWindowUnicode (hWnd=0x202a8) returned 1 [0100.103] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.104] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1a30226) returned 0x1 [0100.104] SetCursor (hCursor=0x10003) returned 0x10003 [0100.104] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.104] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.104] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x200, wParam=0x0, lParam=0x401ad) returned 0x0 [0100.104] GetKeyState (nVirtKey=1) returned 1 [0100.104] GetKeyState (nVirtKey=2) returned 1 [0100.104] GetKeyState (nVirtKey=4) returned 0 [0100.105] GetKeyState (nVirtKey=5) returned 0 [0100.105] GetKeyState (nVirtKey=6) returned 0 [0100.105] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.105] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.105] WaitMessage () returned 1 [0100.133] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.133] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1a40225) returned 0x1 [0100.133] IsWindowUnicode (hWnd=0x202a8) returned 1 [0100.133] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.134] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1a40225) returned 0x1 [0100.134] SetCursor (hCursor=0x10003) returned 0x10003 [0100.134] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.134] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.134] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x200, wParam=0x0, lParam=0x501ac) returned 0x0 [0100.134] GetKeyState (nVirtKey=1) returned 1 [0100.134] GetKeyState (nVirtKey=2) returned 1 [0100.134] GetKeyState (nVirtKey=4) returned 0 [0100.134] GetKeyState (nVirtKey=5) returned 0 [0100.134] GetKeyState (nVirtKey=6) returned 0 [0100.135] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.135] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.135] WaitMessage () returned 1 [0100.145] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.146] IsWindowUnicode (hWnd=0x102d6) returned 1 [0100.146] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.146] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.146] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.146] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.146] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.146] WaitMessage () returned 1 [0100.163] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.163] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1a40224) returned 0x1 [0100.163] IsWindowUnicode (hWnd=0x202a8) returned 1 [0100.163] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.164] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1a40224) returned 0x1 [0100.164] SetCursor (hCursor=0x10003) returned 0x10003 [0100.164] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.164] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.164] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x200, wParam=0x0, lParam=0x501ab) returned 0x0 [0100.164] GetKeyState (nVirtKey=1) returned 1 [0100.164] GetKeyState (nVirtKey=2) returned 1 [0100.164] GetKeyState (nVirtKey=4) returned 0 [0100.164] GetKeyState (nVirtKey=5) returned 0 [0100.165] GetKeyState (nVirtKey=6) returned 0 [0100.165] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.165] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.165] WaitMessage () returned 1 [0100.193] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.193] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x19b021f) returned 0x1 [0100.193] IsWindowUnicode (hWnd=0x30258) returned 1 [0100.194] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.194] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.194] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.194] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0100.194] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.194] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x19b021f) returned 0x1 [0100.194] IsWindowUnicode (hWnd=0x30258) returned 1 [0100.194] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.195] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x19b021f) returned 0x1 [0100.195] SetCursor (hCursor=0x10003) returned 0x10003 [0100.195] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.195] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.195] _TrackMouseEvent (in: lpEventTrack=0x2ed2928 | out: lpEventTrack=0x2ed2928) returned 1 [0100.195] SendMessageW (hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0100.195] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0100.196] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x200, wParam=0x0, lParam=0x11901b4) returned 0x0 [0100.196] GetKeyState (nVirtKey=1) returned 1 [0100.196] GetKeyState (nVirtKey=2) returned 1 [0100.196] GetKeyState (nVirtKey=4) returned 0 [0100.196] GetKeyState (nVirtKey=5) returned 0 [0100.196] GetKeyState (nVirtKey=6) returned 0 [0100.196] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.196] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.196] WaitMessage () returned 1 [0100.222] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.222] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x194021e) returned 0x1 [0100.222] IsWindowUnicode (hWnd=0x102c6) returned 1 [0100.222] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.222] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.222] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.222] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0100.222] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.222] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x194021e) returned 0x1 [0100.222] IsWindowUnicode (hWnd=0x102c6) returned 1 [0100.222] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.222] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x194021e) returned 0x1 [0100.222] SetCursor (hCursor=0x10003) returned 0x10003 [0100.222] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.222] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.223] _TrackMouseEvent (in: lpEventTrack=0x2eeb224 | out: lpEventTrack=0x2eeb224) returned 1 [0100.223] SendMessageW (hWnd=0x102c6, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0100.223] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0100.223] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x200, wParam=0x0, lParam=0x3701a7) returned 0x0 [0100.223] GetKeyState (nVirtKey=1) returned 1 [0100.223] GetKeyState (nVirtKey=2) returned 1 [0100.223] GetKeyState (nVirtKey=4) returned 0 [0100.223] GetKeyState (nVirtKey=5) returned 0 [0100.223] GetKeyState (nVirtKey=6) returned 0 [0100.223] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.223] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.223] WaitMessage () returned 1 [0100.252] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.252] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x193021d) returned 0x1 [0100.252] IsWindowUnicode (hWnd=0x102c6) returned 1 [0100.252] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.252] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x193021d) returned 0x1 [0100.253] SetCursor (hCursor=0x10003) returned 0x10003 [0100.253] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.253] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.253] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x200, wParam=0x0, lParam=0x3601a6) returned 0x0 [0100.253] GetKeyState (nVirtKey=1) returned 1 [0100.253] GetKeyState (nVirtKey=2) returned 1 [0100.253] GetKeyState (nVirtKey=4) returned 0 [0100.253] GetKeyState (nVirtKey=5) returned 0 [0100.253] GetKeyState (nVirtKey=6) returned 0 [0100.253] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.253] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.253] WaitMessage () returned 1 [0100.255] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.255] IsWindowUnicode (hWnd=0x102d6) returned 1 [0100.255] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.255] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.255] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.255] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.255] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.255] WaitMessage () returned 1 [0100.317] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.317] IsWindowUnicode (hWnd=0x102c6) returned 1 [0100.318] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.318] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.318] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.318] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.318] IsWindowUnicode (hWnd=0x102c6) returned 1 [0100.318] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.318] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.318] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.318] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x2a1, wParam=0x0, lParam=0x3601a6) returned 0x0 [0100.318] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.318] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.318] WaitMessage () returned 1 [0100.366] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.366] IsWindowUnicode (hWnd=0x102d6) returned 1 [0100.366] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.366] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.366] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.366] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.366] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.367] WaitMessage () returned 1 [0100.398] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.398] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x197021a) returned 0x1 [0100.398] IsWindowUnicode (hWnd=0x102c6) returned 1 [0100.399] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.399] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x197021a) returned 0x1 [0100.399] SetCursor (hCursor=0x10003) returned 0x10003 [0100.399] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.399] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.399] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x200, wParam=0x0, lParam=0x3a01a3) returned 0x0 [0100.399] GetKeyState (nVirtKey=1) returned 1 [0100.399] GetKeyState (nVirtKey=2) returned 1 [0100.400] GetKeyState (nVirtKey=4) returned 0 [0100.400] GetKeyState (nVirtKey=5) returned 0 [0100.400] GetKeyState (nVirtKey=6) returned 0 [0100.400] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.400] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.400] WaitMessage () returned 1 [0100.427] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.427] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x19e0217) returned 0x1 [0100.428] IsWindowUnicode (hWnd=0x30258) returned 1 [0100.428] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.428] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.428] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.428] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0100.428] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.428] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x19e0217) returned 0x1 [0100.428] IsWindowUnicode (hWnd=0x30258) returned 1 [0100.428] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.429] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x19e0217) returned 0x1 [0100.429] SetCursor (hCursor=0x10003) returned 0x10003 [0100.429] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.429] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.429] _TrackMouseEvent (in: lpEventTrack=0x2ed2928 | out: lpEventTrack=0x2ed2928) returned 1 [0100.429] SendMessageW (hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0100.429] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0100.430] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x200, wParam=0x0, lParam=0x11c01ac) returned 0x0 [0100.430] GetKeyState (nVirtKey=1) returned 1 [0100.430] GetKeyState (nVirtKey=2) returned 1 [0100.430] GetKeyState (nVirtKey=4) returned 0 [0100.430] GetKeyState (nVirtKey=5) returned 0 [0100.430] GetKeyState (nVirtKey=6) returned 0 [0100.430] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.430] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.430] WaitMessage () returned 1 [0100.455] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.456] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1a50216) returned 0x1 [0100.456] IsWindowUnicode (hWnd=0x202a8) returned 1 [0100.456] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.456] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.456] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.456] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0100.456] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.456] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1a50216) returned 0x1 [0100.457] IsWindowUnicode (hWnd=0x202a8) returned 1 [0100.457] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.457] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1a50216) returned 0x1 [0100.457] SetCursor (hCursor=0x10003) returned 0x10003 [0100.457] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.457] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.458] _TrackMouseEvent (in: lpEventTrack=0x2eebb04 | out: lpEventTrack=0x2eebb04) returned 1 [0100.458] SendMessageW (hWnd=0x202a8, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0100.458] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0100.458] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x200, wParam=0x0, lParam=0x6019d) returned 0x0 [0100.458] GetKeyState (nVirtKey=1) returned 1 [0100.458] GetKeyState (nVirtKey=2) returned 1 [0100.458] GetKeyState (nVirtKey=4) returned 0 [0100.458] GetKeyState (nVirtKey=5) returned 0 [0100.458] GetKeyState (nVirtKey=6) returned 0 [0100.458] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.459] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.459] WaitMessage () returned 1 [0100.474] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.474] IsWindowUnicode (hWnd=0x102d6) returned 1 [0100.474] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.474] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.474] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.474] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.474] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.474] WaitMessage () returned 1 [0100.484] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.484] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1a70216) returned 0x1 [0100.484] IsWindowUnicode (hWnd=0x202a8) returned 1 [0100.484] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.485] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1a70216) returned 0x1 [0100.485] SetCursor (hCursor=0x10003) returned 0x10003 [0100.485] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.485] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.485] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x200, wParam=0x0, lParam=0x8019d) returned 0x0 [0100.485] GetKeyState (nVirtKey=1) returned 1 [0100.485] GetKeyState (nVirtKey=2) returned 1 [0100.485] GetKeyState (nVirtKey=4) returned 0 [0100.486] GetKeyState (nVirtKey=5) returned 0 [0100.486] GetKeyState (nVirtKey=6) returned 0 [0100.486] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.486] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.486] WaitMessage () returned 1 [0100.513] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.513] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1b30215) returned 0x1 [0100.513] IsWindowUnicode (hWnd=0x202a8) returned 1 [0100.513] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.514] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1b30215) returned 0x1 [0100.514] SetCursor (hCursor=0x10003) returned 0x10003 [0100.514] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.514] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.514] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x200, wParam=0x0, lParam=0x14019c) returned 0x0 [0100.514] GetKeyState (nVirtKey=1) returned 1 [0100.514] GetKeyState (nVirtKey=2) returned 1 [0100.514] GetKeyState (nVirtKey=4) returned 0 [0100.514] GetKeyState (nVirtKey=5) returned 0 [0100.514] GetKeyState (nVirtKey=6) returned 0 [0100.515] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.515] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.515] WaitMessage () returned 1 [0100.544] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.544] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1b40215) returned 0x1 [0100.544] IsWindowUnicode (hWnd=0x202a8) returned 1 [0100.544] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.544] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1b40215) returned 0x1 [0100.545] SetCursor (hCursor=0x10003) returned 0x10003 [0100.545] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.545] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.545] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x200, wParam=0x0, lParam=0x15019c) returned 0x0 [0100.545] GetKeyState (nVirtKey=1) returned 1 [0100.545] GetKeyState (nVirtKey=2) returned 1 [0100.545] GetKeyState (nVirtKey=4) returned 0 [0100.545] GetKeyState (nVirtKey=5) returned 0 [0100.545] GetKeyState (nVirtKey=6) returned 0 [0100.545] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.546] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.546] WaitMessage () returned 1 [0100.573] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.573] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1b50215) returned 0x1 [0100.573] IsWindowUnicode (hWnd=0x202a8) returned 1 [0100.573] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.573] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1b50215) returned 0x1 [0100.574] SetCursor (hCursor=0x10003) returned 0x10003 [0100.574] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.574] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.574] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x200, wParam=0x0, lParam=0x16019c) returned 0x0 [0100.574] GetKeyState (nVirtKey=1) returned 1 [0100.574] GetKeyState (nVirtKey=2) returned 1 [0100.574] GetKeyState (nVirtKey=4) returned 0 [0100.574] GetKeyState (nVirtKey=5) returned 0 [0100.574] GetKeyState (nVirtKey=6) returned 0 [0100.574] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.575] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.575] WaitMessage () returned 1 [0100.583] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.583] IsWindowUnicode (hWnd=0x102d6) returned 1 [0100.583] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.583] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.583] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.584] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.584] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.584] WaitMessage () returned 1 [0100.613] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.613] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1bf0212) returned 0x12 [0100.614] IsWindowUnicode (hWnd=0x102b8) returned 1 [0100.614] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.614] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.614] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.614] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0100.614] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.614] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1bf0212) returned 0x12 [0100.614] IsWindowUnicode (hWnd=0x102b8) returned 1 [0100.615] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.615] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1bf0212) returned 0x12 [0100.615] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x20, wParam=0x102b8, lParam=0x2000012) returned 0x0 [0100.615] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x20, wParam=0x102b8, lParam=0x2000012) returned 0x0 [0100.615] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x102b8, lParam=0x2000012) returned 0x0 [0100.616] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.616] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.616] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xa0, wParam=0x12, lParam=0x1bf0212) returned 0x0 [0100.616] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.616] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.616] WaitMessage () returned 1 [0100.670] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.670] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1c40212) returned 0x1 [0100.671] IsWindowUnicode (hWnd=0x102b8) returned 1 [0100.671] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.671] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1c40212) returned 0x1 [0100.671] SetCursor (hCursor=0x10005) returned 0x10003 [0100.672] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.672] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0100.672] _TrackMouseEvent (in: lpEventTrack=0x2eec620 | out: lpEventTrack=0x2eec620) returned 1 [0100.672] SendMessageW (hWnd=0x102b8, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0100.672] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0100.672] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x200, wParam=0x0, lParam=0x30191) returned 0x1 [0100.672] GetKeyState (nVirtKey=1) returned 1 [0100.672] GetKeyState (nVirtKey=2) returned 1 [0100.672] GetKeyState (nVirtKey=4) returned 0 [0100.672] GetKeyState (nVirtKey=5) returned 0 [0100.672] GetKeyState (nVirtKey=6) returned 0 [0100.672] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.673] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.673] WaitMessage () returned 1 [0100.692] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.692] IsWindowUnicode (hWnd=0x102d6) returned 1 [0100.692] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.693] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.693] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.693] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.693] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.693] WaitMessage () returned 1 [0100.750] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.750] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1c60211) returned 0x1 [0100.750] IsWindowUnicode (hWnd=0x102b8) returned 1 [0100.750] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.751] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1c60211) returned 0x1 [0100.751] SetCursor (hCursor=0x10005) returned 0x10005 [0100.751] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.751] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0100.751] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x200, wParam=0x0, lParam=0x50190) returned 0x1 [0100.751] GetKeyState (nVirtKey=1) returned 1 [0100.751] GetKeyState (nVirtKey=2) returned 1 [0100.751] GetKeyState (nVirtKey=4) returned 0 [0100.751] GetKeyState (nVirtKey=5) returned 0 [0100.751] GetKeyState (nVirtKey=6) returned 0 [0100.752] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.752] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.752] WaitMessage () returned 1 [0100.801] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.801] IsWindowUnicode (hWnd=0x102d6) returned 1 [0100.801] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.801] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.801] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.802] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.802] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.802] WaitMessage () returned 1 [0100.848] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.849] IsWindowUnicode (hWnd=0x102b8) returned 1 [0100.849] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.849] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.849] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.849] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.849] IsWindowUnicode (hWnd=0x102b8) returned 1 [0100.849] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.849] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.849] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.849] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x2a1, wParam=0x0, lParam=0x50190) returned 0x0 [0100.849] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.849] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.849] WaitMessage () returned 1 [0100.903] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.903] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1c60211) returned 0x1 [0100.903] IsWindowUnicode (hWnd=0x102b8) returned 1 [0100.903] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.904] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1c60211) returned 0x1 [0100.904] GetDlgItem (hDlg=0x202a8, nIDDlgItem=0) returned 0x0 [0100.904] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x210, wParam=0x201, lParam=0x270198) returned 0x0 [0100.904] GetDlgItem (hDlg=0x30258, nIDDlgItem=0) returned 0x0 [0100.904] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x210, wParam=0x201, lParam=0x14401a6) returned 0x0 [0100.904] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x21, wParam=0x30258, lParam=0x2010001) returned 0x1 [0100.904] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x21, wParam=0x30258, lParam=0x2010001) returned 0x1 [0100.904] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x21, wParam=0x30258, lParam=0x2010001) returned 0x1 [0100.905] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x46, wParam=0x0, lParam=0x119f158) returned 0x0 [0100.905] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0100.905] NtdllDefWindowProc_W (hWnd=0x30254, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0100.905] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0100.908] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0100.908] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0100.908] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0100.909] GetFocus () returned 0x0 [0100.909] SetFocus (hWnd=0x102d4) returned 0x0 [0100.909] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0100.910] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0100.910] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0100.910] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0100.910] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0100.910] GetStockObject (i=5) returned 0x1900015 [0100.910] GetDlgItem (hDlg=0x30258, nIDDlgItem=66260) returned 0x102d4 [0100.910] SendMessageW (hWnd=0x102d4, Msg=0x202b, wParam=0x102d4, lParam=0x119e8b4) returned 0x0 [0100.910] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x202b, wParam=0x102d4, lParam=0x119e8b4) returned 0x0 [0100.910] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0100.910] SetCursor (hCursor=0x10005) returned 0x10005 [0100.910] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.910] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0100.911] GetKeyState (nVirtKey=1) returned -128 [0100.915] GetKeyState (nVirtKey=2) returned 1 [0100.915] GetKeyState (nVirtKey=4) returned 0 [0100.915] GetKeyState (nVirtKey=5) returned 0 [0100.915] GetKeyState (nVirtKey=6) returned 0 [0100.916] IsWindowVisible (hWnd=0x102b8) returned 1 [0100.916] IsWindowEnabled (hWnd=0x102b8) returned 1 [0100.916] SetFocus (hWnd=0x102b8) returned 0x102d4 [0100.916] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x8, wParam=0x102b8, lParam=0x0) returned 0x0 [0100.916] GetStockObject (i=5) returned 0x1900015 [0100.916] GetDlgItem (hDlg=0x30258, nIDDlgItem=66260) returned 0x102d4 [0100.916] SendMessageW (hWnd=0x102d4, Msg=0x202b, wParam=0x102d4, lParam=0x119e9ac) returned 0x0 [0100.916] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x202b, wParam=0x102d4, lParam=0x119e9ac) returned 0x0 [0100.916] GetCapture () returned 0x0 [0100.916] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0100.916] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0100.917] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0100.918] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0100.918] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0100.918] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x7, wParam=0x102d4, lParam=0x0) returned 0x1 [0100.918] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0100.918] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0 [0100.918] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0100.918] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x282, wParam=0xf, lParam=0x1200e7) returned 0x0 [0100.919] SetTextColor (hdc=0x470108fd, color=0x0) returned 0x0 [0100.919] SetBkColor (hdc=0x470108fd, color=0xffffff) returned 0xffffff [0100.919] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0100.919] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0100.919] SendMessageW (hWnd=0x102b8, Msg=0x2111, wParam=0x10002b8, lParam=0x102b8) returned 0x0 [0100.920] SendMessageW (hWnd=0x102b8, Msg=0xb0, wParam=0x119ec98, lParam=0x119ec7c) returned 0x0 [0100.920] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xb0, wParam=0x119ec98, lParam=0x119ec7c) returned 0x0 [0100.920] GetKeyState (nVirtKey=1) returned -128 [0100.920] GetKeyState (nVirtKey=2) returned 1 [0100.920] GetKeyState (nVirtKey=4) returned 0 [0100.920] GetKeyState (nVirtKey=5) returned 0 [0100.920] GetKeyState (nVirtKey=6) returned 0 [0100.920] GetFocus () returned 0x102b8 [0100.920] GetFocus () returned 0x102b8 [0100.920] GetFocus () returned 0x102b8 [0100.920] GetKeyState (nVirtKey=1) returned -128 [0100.920] GetKeyState (nVirtKey=2) returned 1 [0100.920] GetKeyState (nVirtKey=4) returned 0 [0100.920] GetKeyState (nVirtKey=5) returned 0 [0100.920] GetKeyState (nVirtKey=6) returned 0 [0100.920] GetKeyState (nVirtKey=1) returned -128 [0100.920] GetKeyState (nVirtKey=2) returned 1 [0100.920] GetKeyState (nVirtKey=4) returned 0 [0100.921] GetKeyState (nVirtKey=5) returned 0 [0100.921] GetKeyState (nVirtKey=6) returned 0 [0100.921] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x201, wParam=0x1, lParam=0x50190) returned 0x1 [0100.921] SetTextColor (hdc=0x470108fd, color=0x0) returned 0x0 [0100.921] SetBkColor (hdc=0x470108fd, color=0xffffff) returned 0xffffff [0100.922] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0100.922] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0100.922] GetKeyState (nVirtKey=1) returned -128 [0100.922] GetKeyState (nVirtKey=2) returned 1 [0100.922] GetKeyState (nVirtKey=4) returned 0 [0100.922] GetKeyState (nVirtKey=5) returned 0 [0100.922] GetKeyState (nVirtKey=6) returned 0 [0100.922] GetCapture () returned 0x102b8 [0100.922] GetKeyState (nVirtKey=1) returned -128 [0100.922] GetKeyState (nVirtKey=2) returned 1 [0100.922] GetKeyState (nVirtKey=4) returned 0 [0100.922] GetKeyState (nVirtKey=5) returned 0 [0100.922] GetKeyState (nVirtKey=6) returned 0 [0100.922] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.922] IsWindowUnicode (hWnd=0x102d4) returned 1 [0100.922] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.922] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.922] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.922] BeginPaint (in: hWnd=0x102d4, lpPaint=0x119ed10 | out: lpPaint=0x119ed10) returned 0xe010919 [0100.922] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0100.922] CreateCompatibleDC (hdc=0xe010919) returned 0x4701089d [0100.922] GetObjectType (h=0xe010919) returned 0x3 [0100.922] CreateCompatibleBitmap (hdc=0xe010919, cx=1, cy=1) returned 0x1c0508f4 [0100.922] GetDIBits (in: hdc=0xe010919, hbm=0x1c0508f4, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0100.922] GetDIBits (in: hdc=0xe010919, hbm=0x1c0508f4, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0100.923] DeleteObject (ho=0x1c0508f4) returned 1 [0100.923] CreateDIBSection (in: hdc=0xe010919, lpbmi=0x119e7f0, usage=0x0, ppvBits=0x119ece4, hSection=0x0, offset=0x0 | out: ppvBits=0x119ece4) returned 0x40050882 [0100.923] SelectObject (hdc=0x4701089d, h=0x40050882) returned 0x185000f [0100.923] GdipCreateFromHDC (hdc=0x4701089d, graphics=0x119ecc8) returned 0x0 [0100.923] GdipTranslateWorldTransform (graphics=0x5608768, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0100.923] GdipSetClipRectI (graphics=0x5608768, x=0, y=0, width=711, height=36, combineMode=0x0) returned 0x0 [0100.923] GdipCreateMatrix (matrix=0x119ed70) returned 0x0 [0100.923] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608b78) returned 0x0 [0100.923] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119ed88) returned 0x0 [0100.923] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0100.923] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x15d6050) returned 0x0 [0100.923] LocalFree (hMem=0x15d6050) returned 0x0 [0100.923] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0100.923] GdipCreateRegion (region=0x119ed70) returned 0x0 [0100.923] GdipGetClip (graphics=0x5608768, region=0x56034a8) returned 0x0 [0100.923] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ed7c) returned 0x0 [0100.923] GdipSaveGraphics (graphics=0x5608768, state=0x119eda8) returned 0x0 [0100.923] GdipRestoreGraphics (graphics=0x5608768, state=0xfd860dbd) returned 0x0 [0100.923] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0100.923] GdipGetDC (graphics=0x5608768, hdc=0x119eaf8) returned 0x0 [0100.923] GetCurrentObject (hdc=0x4701089d, type=0x1) returned 0x1b00017 [0100.923] GetCurrentObject (hdc=0x4701089d, type=0x2) returned 0x1900010 [0100.924] GetCurrentObject (hdc=0x4701089d, type=0x7) returned 0x40050882 [0100.924] GetCurrentObject (hdc=0x4701089d, type=0x6) returned 0x18a0048 [0100.924] SaveDC (hdc=0x4701089d) returned 1 [0100.924] GetNearestColor (hdc=0x4701089d, color=0xc0) returned 0xc0 [0100.924] GetNearestColor (hdc=0x4701089d, color=0x40) returned 0x40 [0100.924] GetNearestColor (hdc=0x4701089d, color=0x0) returned 0x0 [0100.924] GetNearestColor (hdc=0x4701089d, color=0x5656e5) returned 0x5656e5 [0100.924] GetNearestColor (hdc=0x4701089d, color=0x0) returned 0x0 [0100.924] GetNearestColor (hdc=0x4701089d, color=0x6060ff) returned 0x6060ff [0100.924] GetNearestColor (hdc=0x4701089d, color=0x5656e5) returned 0x5656e5 [0100.924] GetNearestColor (hdc=0x4701089d, color=0xe6) returned 0xe6 [0100.924] GetNearestColor (hdc=0x4701089d, color=0x0) returned 0x0 [0100.924] RestoreDC (hdc=0x4701089d, nSavedDC=-1) returned 1 [0100.924] GdipReleaseDC (graphics=0x5608768, hdc=0x4701089d) returned 0x0 [0100.924] DrawTextExW (in: hdc=0x490108ba, lpchText="Decrypt", cchText=7, lprc=0x119e99c, format=0x102415, lpdtp=0x2eee04c | out: lpchText="Decrypt", lprc=0x119e99c) returned 13 [0100.924] GdipCreateRegion (region=0x119e9f0) returned 0x0 [0100.924] GdipGetClip (graphics=0x5608768, region=0x56034a8) returned 0x0 [0100.924] GdipCreateMatrix (matrix=0x119e9f0) returned 0x0 [0100.924] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608ba8) returned 0x0 [0100.924] GdipIsMatrixIdentity (matrix=0x5608ba8, result=0x119ea08) returned 0x0 [0100.924] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0100.924] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6520) returned 0x0 [0100.924] LocalFree (hMem=0x15d6520) returned 0x0 [0100.924] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0100.924] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6050) returned 0x0 [0100.924] LocalFree (hMem=0x15d6050) returned 0x0 [0100.925] GdipDeleteMatrix (matrix=0x5608ba8) returned 0x0 [0100.925] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ea34) returned 0x0 [0100.925] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ea24) returned 0x0 [0100.925] GdipGetRegionHRgn (region=0x56034a8, graphics=0x5608768, hRgn=0x119ea24) returned 0x0 [0100.925] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0100.925] GdipGetDC (graphics=0x5608768, hdc=0x119ea3c) returned 0x0 [0100.925] GetCurrentObject (hdc=0x4701089d, type=0x1) returned 0x1b00017 [0100.925] GetCurrentObject (hdc=0x4701089d, type=0x2) returned 0x1900010 [0100.925] GetCurrentObject (hdc=0x4701089d, type=0x7) returned 0x40050882 [0100.925] GetCurrentObject (hdc=0x4701089d, type=0x6) returned 0x18a0048 [0100.925] SaveDC (hdc=0x4701089d) returned 1 [0100.925] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x620408c1 [0100.925] GetClipRgn (hdc=0x4701089d, hrgn=0x620408c1) returned 0 [0100.925] SelectClipRgn (hdc=0x4701089d, hrgn=0x71040894) returned 2 [0100.925] DeleteObject (ho=0x620408c1) returned 1 [0100.925] DeleteObject (ho=0x71040894) returned 1 [0100.925] OffsetViewportOrgEx (in: hdc=0x4701089d, x=0, y=0, lppt=0x2eee244 | out: lppt=0x2eee244) returned 1 [0100.925] GetNearestColor (hdc=0x4701089d, color=0xc0) returned 0xc0 [0100.925] CreateSolidBrush (color=0xc0) returned 0x4210086a [0100.925] FillRect (hDC=0x4701089d, lprc=0x119ea40, hbr=0x4210086a) returned 1 [0100.926] DeleteObject (ho=0x4210086a) returned 1 [0100.926] RestoreDC (hdc=0x4701089d, nSavedDC=-1) returned 1 [0100.926] GdipReleaseDC (graphics=0x5608768, hdc=0x4701089d) returned 0x0 [0100.926] GdipGetTextRenderingHint (graphics=0x5608768, mode=0x119eabc) returned 0x0 [0100.926] GdipGetDC (graphics=0x5608768, hdc=0x119eaa8) returned 0x0 [0100.926] GetCurrentObject (hdc=0x4701089d, type=0x1) returned 0x1b00017 [0100.926] GetCurrentObject (hdc=0x4701089d, type=0x2) returned 0x1900010 [0100.926] GetCurrentObject (hdc=0x4701089d, type=0x7) returned 0x40050882 [0100.926] GetCurrentObject (hdc=0x4701089d, type=0x6) returned 0x18a0048 [0100.926] SaveDC (hdc=0x4701089d) returned 1 [0100.926] GetTextAlign (hdc=0x4701089d) returned 0x0 [0100.926] GetTextColor (hdc=0x4701089d) returned 0x0 [0100.926] GetCurrentObject (hdc=0x4701089d, type=0x6) returned 0x18a0048 [0100.926] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e808 | out: pv=0x119e808) returned 92 [0100.926] SelectObject (hdc=0x4701089d, h=0xb20a08b8) returned 0x18a0048 [0100.926] GetBkMode (hdc=0x4701089d) returned 2 [0100.933] SetBkMode (hdc=0x4701089d, mode=1) returned 2 [0100.933] DrawTextExW (in: hdc=0x4701089d, lpchText="Decrypt", cchText=7, lprc=0x119e8ec, format=0x102415, lpdtp=0x2eee4a4 | out: lpchText="Decrypt", lprc=0x119e8ec) returned 13 [0100.933] DrawTextExW (in: hdc=0x4701089d, lpchText="Decrypt", cchText=7, lprc=0x119ea3c, format=0x102015, lpdtp=0x2eee4a4 | out: lpchText="Decrypt", lprc=0x119ea3c) returned 13 [0100.933] RestoreDC (hdc=0x4701089d, nSavedDC=-1) returned 1 [0100.933] GdipReleaseDC (graphics=0x5608768, hdc=0x4701089d) returned 0x0 [0100.933] GetFocus () returned 0x102b8 [0100.933] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb20) returned 0x0 [0100.933] GdipDrawRectangleI (graphics=0x5608768, pen=0x5603418, x=0, y=0, width=710, height=35) returned 0x0 [0100.933] GdipDeletePen (pen=0x5603418) returned 0x0 [0100.933] GdipGetDC (graphics=0x5608768, hdc=0x119ed68) returned 0x0 [0100.933] BitBlt (hdc=0xe010919, x=0, y=0, cx=711, cy=36, hdcSrc=0x4701089d, x1=0, y1=0, rop=0xcc0020) returned 1 [0100.934] GdipReleaseDC (graphics=0x5608768, hdc=0x4701089d) returned 0x0 [0100.934] SelectPalette (hdc=0xe010919, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0100.934] SelectObject (hdc=0x4701089d, h=0x185000f) returned 0x40050882 [0100.934] DeleteDC (hdc=0x4701089d) returned 1 [0100.934] GdipDeleteGraphics (graphics=0x5608768) returned 0x0 [0100.934] DeleteObject (ho=0x40050882) returned 1 [0100.934] EndPaint (hWnd=0x102d4, lpPaint=0x119ed0c) returned 1 [0100.934] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.934] IsWindowUnicode (hWnd=0x102d6) returned 1 [0100.934] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0100.934] TranslateMessage (lpMsg=0x119f22c) returned 0 [0100.934] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0100.934] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.934] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0100.934] WaitMessage () returned 1 [0101.003] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.003] IsWindowUnicode (hWnd=0x102b8) returned 1 [0101.003] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.003] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.003] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0101.003] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x200, wParam=0x1, lParam=0x50183) returned 0x1 [0101.004] SetTextColor (hdc=0xe010919, color=0x0) returned 0x0 [0101.004] SetBkColor (hdc=0xe010919, color=0xffffff) returned 0xffffff [0101.004] GetKeyState (nVirtKey=1) returned -128 [0101.004] GetKeyState (nVirtKey=2) returned 1 [0101.004] GetKeyState (nVirtKey=4) returned 0 [0101.004] GetKeyState (nVirtKey=5) returned 0 [0101.004] GetKeyState (nVirtKey=6) returned 0 [0101.004] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.005] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.005] WaitMessage () returned 1 [0101.020] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.020] IsWindowUnicode (hWnd=0x102d6) returned 1 [0101.020] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.020] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.020] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.020] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.020] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.021] WaitMessage () returned 1 [0101.039] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.039] IsWindowUnicode (hWnd=0x102b8) returned 1 [0101.039] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.039] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.039] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0101.039] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x200, wParam=0x1, lParam=0x5016a) returned 0x1 [0101.039] SetTextColor (hdc=0xe010919, color=0x0) returned 0x0 [0101.039] SetBkColor (hdc=0xe010919, color=0xffffff) returned 0xffffff [0101.039] GetKeyState (nVirtKey=1) returned -128 [0101.039] GetKeyState (nVirtKey=2) returned 1 [0101.039] GetKeyState (nVirtKey=4) returned 0 [0101.039] GetKeyState (nVirtKey=5) returned 0 [0101.039] GetKeyState (nVirtKey=6) returned 0 [0101.039] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.039] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.039] WaitMessage () returned 1 [0101.053] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.053] IsWindowUnicode (hWnd=0x102b8) returned 1 [0101.053] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.053] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.053] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0101.053] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x200, wParam=0x1, lParam=0x500f8) returned 0x1 [0101.054] SetTextColor (hdc=0xe010919, color=0x0) returned 0x0 [0101.054] SetBkColor (hdc=0xe010919, color=0xffffff) returned 0xffffff [0101.054] GetKeyState (nVirtKey=1) returned -128 [0101.054] GetKeyState (nVirtKey=2) returned 1 [0101.054] GetKeyState (nVirtKey=4) returned 0 [0101.054] GetKeyState (nVirtKey=5) returned 0 [0101.054] GetKeyState (nVirtKey=6) returned 0 [0101.054] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.054] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.054] WaitMessage () returned 1 [0101.075] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.075] IsWindowUnicode (hWnd=0x102b8) returned 1 [0101.075] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.075] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.075] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0101.075] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x200, wParam=0x1, lParam=0x500cd) returned 0x1 [0101.075] SetTextColor (hdc=0xe010919, color=0x0) returned 0x0 [0101.075] SetBkColor (hdc=0xe010919, color=0xffffff) returned 0xffffff [0101.075] GetKeyState (nVirtKey=1) returned -128 [0101.075] GetKeyState (nVirtKey=2) returned 1 [0101.075] GetKeyState (nVirtKey=4) returned 0 [0101.075] GetKeyState (nVirtKey=5) returned 0 [0101.076] GetKeyState (nVirtKey=6) returned 0 [0101.076] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.076] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.076] WaitMessage () returned 1 [0101.106] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.106] IsWindowUnicode (hWnd=0x102b8) returned 1 [0101.106] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.107] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.107] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0101.107] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x200, wParam=0x1, lParam=0x50032) returned 0x1 [0101.107] SetTextColor (hdc=0xe010919, color=0x0) returned 0x0 [0101.107] SetBkColor (hdc=0xe010919, color=0xffffff) returned 0xffffff [0101.108] GetKeyState (nVirtKey=1) returned -128 [0101.108] GetKeyState (nVirtKey=2) returned 1 [0101.108] GetKeyState (nVirtKey=4) returned 0 [0101.108] GetKeyState (nVirtKey=5) returned 0 [0101.108] GetKeyState (nVirtKey=6) returned 0 [0101.108] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.108] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.108] WaitMessage () returned 1 [0101.131] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.132] IsWindowUnicode (hWnd=0x102d6) returned 1 [0101.132] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.132] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.132] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.132] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.132] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.132] WaitMessage () returned 1 [0101.136] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.136] IsWindowUnicode (hWnd=0x102b8) returned 1 [0101.136] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.136] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.136] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0101.136] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x200, wParam=0x1, lParam=0x5ffcb) returned 0x1 [0101.136] SetTextColor (hdc=0xe010919, color=0x0) returned 0x0 [0101.137] SetBkColor (hdc=0xe010919, color=0xffffff) returned 0xffffff [0101.137] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0101.137] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0101.137] GetKeyState (nVirtKey=1) returned -128 [0101.138] GetKeyState (nVirtKey=2) returned 1 [0101.138] GetKeyState (nVirtKey=4) returned 0 [0101.138] GetKeyState (nVirtKey=5) returned 0 [0101.138] GetKeyState (nVirtKey=6) returned 0 [0101.138] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.138] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.138] WaitMessage () returned 1 [0101.167] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.167] IsWindowUnicode (hWnd=0x102b8) returned 1 [0101.167] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.167] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.168] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0101.168] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x200, wParam=0x1, lParam=0x4ff8c) returned 0x1 [0101.168] SetTextColor (hdc=0xe010919, color=0x0) returned 0x0 [0101.168] SetBkColor (hdc=0xe010919, color=0xffffff) returned 0xffffff [0101.169] GetKeyState (nVirtKey=1) returned -128 [0101.169] GetKeyState (nVirtKey=2) returned 1 [0101.169] GetKeyState (nVirtKey=4) returned 0 [0101.169] GetKeyState (nVirtKey=5) returned 0 [0101.169] GetKeyState (nVirtKey=6) returned 0 [0101.169] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.169] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.169] WaitMessage () returned 1 [0101.224] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.224] IsWindowUnicode (hWnd=0x202a6) returned 1 [0101.224] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.224] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.224] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.224] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.224] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.224] WaitMessage () returned 1 [0101.239] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.239] IsWindowUnicode (hWnd=0x102d6) returned 1 [0101.239] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.240] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.240] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.240] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.240] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.240] WaitMessage () returned 1 [0101.349] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.349] IsWindowUnicode (hWnd=0x102d6) returned 1 [0101.349] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.349] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.349] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.349] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.349] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.349] WaitMessage () returned 1 [0101.409] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.409] IsWindowUnicode (hWnd=0x102b8) returned 1 [0101.409] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.410] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.410] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0101.410] MapWindowPoints (in: hWndFrom=0x102b8, hWndTo=0x0, lpPoints=0x2eeedfc, cPoints=0x1 | out: lpPoints=0x2eeedfc) returned 29425793 [0101.410] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x202, wParam=0x0, lParam=0x4ff8c) returned 0x1 [0101.411] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x1 [0101.412] MapWindowPoints (in: hWndFrom=0x102b8, hWndTo=0x0, lpPoints=0x2eeee28, cPoints=0x1 | out: lpPoints=0x2eeee28) returned 29425793 [0101.412] WindowFromPoint (Point=0xd) returned 0x100ba [0101.412] GetCapture () returned 0x0 [0101.412] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.412] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.412] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.412] IsWindowUnicode (hWnd=0x102b8) returned 1 [0101.413] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.413] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.413] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.413] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0101.413] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.413] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.413] WaitMessage () returned 1 [0101.454] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.454] IsWindowUnicode (hWnd=0x102b8) returned 1 [0101.454] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.455] GetKeyState (nVirtKey=16) returned 1 [0101.455] GetKeyState (nVirtKey=17) returned -128 [0101.455] GetKeyState (nVirtKey=18) returned 0 [0101.455] GetKeyState (nVirtKey=16) returned 1 [0101.455] GetKeyState (nVirtKey=17) returned -128 [0101.455] GetKeyState (nVirtKey=18) returned 0 [0101.456] SendMessageW (hWnd=0x102b8, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0101.456] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0101.456] SendMessageW (hWnd=0x102b8, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0101.456] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0101.456] TranslateMessage (lpMsg=0x119f22c) returned 1 [0101.456] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0101.457] GetKeyState (nVirtKey=16) returned 1 [0101.457] GetKeyState (nVirtKey=17) returned -128 [0101.457] GetKeyState (nVirtKey=18) returned 0 [0101.457] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x100, wParam=0x11, lParam=0x1d0001) returned 0x1 [0101.457] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.457] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.457] WaitMessage () returned 1 [0101.458] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.458] IsWindowUnicode (hWnd=0x102d6) returned 1 [0101.458] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.458] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.458] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.458] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.459] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.459] WaitMessage () returned 1 [0101.548] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.548] IsWindowUnicode (hWnd=0x102b8) returned 1 [0101.548] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.548] GetKeyState (nVirtKey=16) returned 1 [0101.548] GetKeyState (nVirtKey=17) returned -128 [0101.548] GetKeyState (nVirtKey=18) returned 0 [0101.548] GetKeyState (nVirtKey=16) returned 1 [0101.549] GetKeyState (nVirtKey=17) returned -128 [0101.549] GetKeyState (nVirtKey=18) returned 0 [0101.549] SendMessageW (hWnd=0x102b8, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0101.549] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0101.549] SendMessageW (hWnd=0x102b8, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0101.549] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0101.549] TranslateMessage (lpMsg=0x119f22c) returned 1 [0101.550] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0101.550] GetKeyState (nVirtKey=16) returned 1 [0101.550] GetKeyState (nVirtKey=17) returned -128 [0101.550] GetKeyState (nVirtKey=18) returned 0 [0101.550] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x100, wParam=0x56, lParam=0x2f0001) returned 0x1 [0101.550] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.550] IsWindowUnicode (hWnd=0x102b8) returned 1 [0101.550] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.550] GetKeyState (nVirtKey=16) returned 1 [0101.550] GetKeyState (nVirtKey=17) returned -128 [0101.550] GetKeyState (nVirtKey=18) returned 0 [0101.551] SendMessageW (hWnd=0x102b8, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0101.551] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0101.551] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.551] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0101.551] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x102, wParam=0x16, lParam=0x2f0001) returned 0x1 [0101.551] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x302, wParam=0x0, lParam=0x0) returned 0x1 [0101.552] SendMessageW (hWnd=0x102b8, Msg=0x2111, wParam=0x40002b8, lParam=0x102b8) returned 0x0 [0101.552] SendMessageW (hWnd=0x102b8, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x1 [0101.552] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x1 [0101.553] SetTextColor (hdc=0xe010919, color=0x0) returned 0x0 [0101.553] SetBkColor (hdc=0xe010919, color=0xffffff) returned 0xffffff [0101.557] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0101.557] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0101.557] SendMessageW (hWnd=0x102b8, Msg=0x2111, wParam=0x30002b8, lParam=0x102b8) returned 0x0 [0101.557] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.557] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.558] WaitMessage () returned 1 [0101.568] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.568] IsWindowUnicode (hWnd=0x102d6) returned 1 [0101.568] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.568] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.569] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.569] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.569] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.569] WaitMessage () returned 1 [0101.577] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.577] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1e100ac) returned 0x1 [0101.577] IsWindowUnicode (hWnd=0x102d4) returned 1 [0101.577] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.577] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1e100ac) returned 0x1 [0101.578] SetCursor (hCursor=0x10003) returned 0x10005 [0101.578] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.578] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.578] _TrackMouseEvent (in: lpEventTrack=0x2eef36c | out: lpEventTrack=0x2eef36c) returned 1 [0101.578] SendMessageW (hWnd=0x102d4, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0101.578] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0101.578] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0101.579] GetKeyState (nVirtKey=1) returned 0 [0101.579] GetKeyState (nVirtKey=2) returned 1 [0101.579] GetKeyState (nVirtKey=4) returned 0 [0101.579] GetKeyState (nVirtKey=5) returned 0 [0101.579] GetKeyState (nVirtKey=6) returned 0 [0101.579] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.579] IsWindowUnicode (hWnd=0x102d4) returned 1 [0101.579] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.579] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.579] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.580] BeginPaint (in: hWnd=0x102d4, lpPaint=0x119ed10 | out: lpPaint=0x119ed10) returned 0x470108fd [0101.580] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0101.580] CreateCompatibleDC (hdc=0x470108fd) returned 0x220108f4 [0101.580] GetObjectType (h=0x470108fd) returned 0x3 [0101.580] CreateCompatibleBitmap (hdc=0x470108fd, cx=1, cy=1) returned 0x46050882 [0101.580] GetDIBits (in: hdc=0x470108fd, hbm=0x46050882, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0101.581] GetDIBits (in: hdc=0x470108fd, hbm=0x46050882, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0101.581] DeleteObject (ho=0x46050882) returned 1 [0101.581] CreateDIBSection (in: hdc=0x470108fd, lpbmi=0x119e7f0, usage=0x0, ppvBits=0x119ece4, hSection=0x0, offset=0x0 | out: ppvBits=0x119ece4) returned 0x4d05089d [0101.581] SelectObject (hdc=0x220108f4, h=0x4d05089d) returned 0x185000f [0101.582] GdipCreateFromHDC (hdc=0x220108f4, graphics=0x119ecc8) returned 0x0 [0101.582] GdipTranslateWorldTransform (graphics=0x5608768, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0101.582] GdipSetClipRectI (graphics=0x5608768, x=0, y=0, width=711, height=36, combineMode=0x0) returned 0x0 [0101.582] GdipCreateMatrix (matrix=0x119ed70) returned 0x0 [0101.582] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608b78) returned 0x0 [0101.582] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119ed88) returned 0x0 [0101.585] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0101.585] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x15d6050) returned 0x0 [0101.585] LocalFree (hMem=0x15d6050) returned 0x0 [0101.585] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0101.585] GdipCreateRegion (region=0x119ed70) returned 0x0 [0101.585] GdipGetClip (graphics=0x5608768, region=0x56034a8) returned 0x0 [0101.585] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ed7c) returned 0x0 [0101.585] GdipSaveGraphics (graphics=0x5608768, state=0x119eda8) returned 0x0 [0101.585] GdipRestoreGraphics (graphics=0x5608768, state=0xfd840dbd) returned 0x0 [0101.585] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0101.586] GdipGetDC (graphics=0x5608768, hdc=0x119eb54) returned 0x0 [0101.586] GetCurrentObject (hdc=0x220108f4, type=0x1) returned 0x1b00017 [0101.586] GetCurrentObject (hdc=0x220108f4, type=0x2) returned 0x1900010 [0101.586] GetCurrentObject (hdc=0x220108f4, type=0x7) returned 0x4d05089d [0101.586] GetCurrentObject (hdc=0x220108f4, type=0x6) returned 0x18a0048 [0101.586] SaveDC (hdc=0x220108f4) returned 1 [0101.586] GetNearestColor (hdc=0x220108f4, color=0xc0) returned 0xc0 [0101.586] GetNearestColor (hdc=0x220108f4, color=0x40) returned 0x40 [0101.586] GetNearestColor (hdc=0x220108f4, color=0x0) returned 0x0 [0101.586] GetNearestColor (hdc=0x220108f4, color=0x5656e5) returned 0x5656e5 [0101.586] GetNearestColor (hdc=0x220108f4, color=0x0) returned 0x0 [0101.586] GetNearestColor (hdc=0x220108f4, color=0x6060ff) returned 0x6060ff [0101.587] GetNearestColor (hdc=0x220108f4, color=0x5656e5) returned 0x5656e5 [0101.587] GetNearestColor (hdc=0x220108f4, color=0xe6) returned 0xe6 [0101.587] GetNearestColor (hdc=0x220108f4, color=0x0) returned 0x0 [0101.587] RestoreDC (hdc=0x220108f4, nSavedDC=-1) returned 1 [0101.587] GdipReleaseDC (graphics=0x5608768, hdc=0x220108f4) returned 0x0 [0101.587] DrawTextExW (in: hdc=0x490108ba, lpchText="Decrypt", cchText=7, lprc=0x119e9f8, format=0x102415, lpdtp=0x2ef097c | out: lpchText="Decrypt", lprc=0x119e9f8) returned 13 [0101.587] GdipCreateRegion (region=0x119ea4c) returned 0x0 [0101.587] GdipGetClip (graphics=0x5608768, region=0x56034a8) returned 0x0 [0101.587] GdipCreateMatrix (matrix=0x119ea4c) returned 0x0 [0101.587] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608ba8) returned 0x0 [0101.587] GdipIsMatrixIdentity (matrix=0x5608ba8, result=0x119ea64) returned 0x0 [0101.588] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0101.588] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6050) returned 0x0 [0101.588] LocalFree (hMem=0x15d6050) returned 0x0 [0101.588] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0101.588] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6520) returned 0x0 [0101.588] LocalFree (hMem=0x15d6520) returned 0x0 [0101.588] GdipDeleteMatrix (matrix=0x5608ba8) returned 0x0 [0101.588] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ea90) returned 0x0 [0101.588] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ea80) returned 0x0 [0101.588] GdipGetRegionHRgn (region=0x56034a8, graphics=0x5608768, hRgn=0x119ea80) returned 0x0 [0101.588] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0101.588] GdipGetDC (graphics=0x5608768, hdc=0x119ea98) returned 0x0 [0101.588] GetCurrentObject (hdc=0x220108f4, type=0x1) returned 0x1b00017 [0101.589] GetCurrentObject (hdc=0x220108f4, type=0x2) returned 0x1900010 [0101.589] GetCurrentObject (hdc=0x220108f4, type=0x7) returned 0x4d05089d [0101.589] GetCurrentObject (hdc=0x220108f4, type=0x6) returned 0x18a0048 [0101.589] SaveDC (hdc=0x220108f4) returned 1 [0101.589] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x72040894 [0101.589] GetClipRgn (hdc=0x220108f4, hrgn=0x72040894) returned 0 [0101.589] SelectClipRgn (hdc=0x220108f4, hrgn=0x660408c1) returned 2 [0101.589] DeleteObject (ho=0x72040894) returned 1 [0101.589] DeleteObject (ho=0x660408c1) returned 1 [0101.589] OffsetViewportOrgEx (in: hdc=0x220108f4, x=0, y=0, lppt=0x2ef0b74 | out: lppt=0x2ef0b74) returned 1 [0101.589] GetNearestColor (hdc=0x220108f4, color=0xe6) returned 0xe6 [0101.589] CreateSolidBrush (color=0xe6) returned 0x4310086a [0101.590] FillRect (hDC=0x220108f4, lprc=0x119ea9c, hbr=0x4310086a) returned 1 [0101.590] DeleteObject (ho=0x4310086a) returned 1 [0101.590] RestoreDC (hdc=0x220108f4, nSavedDC=-1) returned 1 [0101.591] GdipReleaseDC (graphics=0x5608768, hdc=0x220108f4) returned 0x0 [0101.591] GdipGetTextRenderingHint (graphics=0x5608768, mode=0x119eb18) returned 0x0 [0101.591] GdipGetDC (graphics=0x5608768, hdc=0x119eb04) returned 0x0 [0101.591] GetCurrentObject (hdc=0x220108f4, type=0x1) returned 0x1b00017 [0101.591] GetCurrentObject (hdc=0x220108f4, type=0x2) returned 0x1900010 [0101.591] GetCurrentObject (hdc=0x220108f4, type=0x7) returned 0x4d05089d [0101.591] GetCurrentObject (hdc=0x220108f4, type=0x6) returned 0x18a0048 [0101.591] SaveDC (hdc=0x220108f4) returned 1 [0101.591] GetTextAlign (hdc=0x220108f4) returned 0x0 [0101.591] GetTextColor (hdc=0x220108f4) returned 0x0 [0101.591] GetCurrentObject (hdc=0x220108f4, type=0x6) returned 0x18a0048 [0101.591] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e864 | out: pv=0x119e864) returned 92 [0101.591] SelectObject (hdc=0x220108f4, h=0xb20a08b8) returned 0x18a0048 [0101.591] GetBkMode (hdc=0x220108f4) returned 2 [0101.591] SetBkMode (hdc=0x220108f4, mode=1) returned 2 [0101.592] DrawTextExW (in: hdc=0x220108f4, lpchText="Decrypt", cchText=7, lprc=0x119e948, format=0x102415, lpdtp=0x2ef0dd4 | out: lpchText="Decrypt", lprc=0x119e948) returned 13 [0101.592] DrawTextExW (in: hdc=0x220108f4, lpchText="Decrypt", cchText=7, lprc=0x119ea98, format=0x102015, lpdtp=0x2ef0dd4 | out: lpchText="Decrypt", lprc=0x119ea98) returned 13 [0101.592] RestoreDC (hdc=0x220108f4, nSavedDC=-1) returned 1 [0101.592] GdipReleaseDC (graphics=0x5608768, hdc=0x220108f4) returned 0x0 [0101.592] GetFocus () returned 0x102b8 [0101.592] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb7c) returned 0x0 [0101.592] GdipDrawRectangleI (graphics=0x5608768, pen=0x5603418, x=0, y=0, width=710, height=35) returned 0x0 [0101.592] GdipDeletePen (pen=0x5603418) returned 0x0 [0101.592] GdipGetDC (graphics=0x5608768, hdc=0x119ed68) returned 0x0 [0101.592] BitBlt (hdc=0x470108fd, x=0, y=0, cx=711, cy=36, hdcSrc=0x220108f4, x1=0, y1=0, rop=0xcc0020) returned 1 [0101.592] GdipReleaseDC (graphics=0x5608768, hdc=0x220108f4) returned 0x0 [0101.592] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0101.592] SelectObject (hdc=0x220108f4, h=0x185000f) returned 0x4d05089d [0101.593] DeleteDC (hdc=0x220108f4) returned 1 [0101.593] GdipDeleteGraphics (graphics=0x5608768) returned 0x0 [0101.593] DeleteObject (ho=0x4d05089d) returned 1 [0101.593] EndPaint (hWnd=0x102d4, lpPaint=0x119ed0c) returned 1 [0101.593] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.594] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.594] WaitMessage () returned 1 [0101.608] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.608] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1e900e2) returned 0x1 [0101.608] IsWindowUnicode (hWnd=0x102d4) returned 1 [0101.608] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.608] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1e900e2) returned 0x1 [0101.608] SetCursor (hCursor=0x10003) returned 0x10003 [0101.608] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.608] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.608] GetKeyState (nVirtKey=1) returned 0 [0101.608] GetKeyState (nVirtKey=2) returned 1 [0101.608] GetKeyState (nVirtKey=4) returned 0 [0101.608] GetKeyState (nVirtKey=5) returned 0 [0101.608] GetKeyState (nVirtKey=6) returned 0 [0101.608] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.608] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.608] WaitMessage () returned 1 [0101.610] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.610] IsWindowUnicode (hWnd=0x102b8) returned 1 [0101.610] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.610] GetKeyState (nVirtKey=16) returned 1 [0101.610] GetKeyState (nVirtKey=17) returned -128 [0101.610] GetKeyState (nVirtKey=18) returned 0 [0101.610] TranslateMessage (lpMsg=0x119f22c) returned 1 [0101.611] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.611] GetKeyState (nVirtKey=16) returned 1 [0101.611] GetKeyState (nVirtKey=17) returned -128 [0101.611] GetKeyState (nVirtKey=18) returned 0 [0101.611] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x101, wParam=0x56, lParam=0xc02f0001) returned 0x0 [0101.611] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.611] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.611] WaitMessage () returned 1 [0101.618] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.618] IsWindowUnicode (hWnd=0x102b8) returned 1 [0101.618] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.618] GetKeyState (nVirtKey=16) returned 1 [0101.618] GetKeyState (nVirtKey=17) returned 0 [0101.618] GetKeyState (nVirtKey=18) returned 0 [0101.618] TranslateMessage (lpMsg=0x119f22c) returned 1 [0101.618] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.619] GetKeyState (nVirtKey=16) returned 1 [0101.619] GetKeyState (nVirtKey=17) returned 0 [0101.619] GetKeyState (nVirtKey=18) returned 0 [0101.619] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x101, wParam=0x11, lParam=0xc01d0001) returned 0x0 [0101.619] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.619] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.619] WaitMessage () returned 1 [0101.634] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.634] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1ef00fc) returned 0x1 [0101.634] IsWindowUnicode (hWnd=0x102d4) returned 1 [0101.634] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.634] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1ef00fc) returned 0x1 [0101.634] SetCursor (hCursor=0x10003) returned 0x10003 [0101.634] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.634] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.634] GetKeyState (nVirtKey=1) returned 0 [0101.634] GetKeyState (nVirtKey=2) returned 1 [0101.634] GetKeyState (nVirtKey=4) returned 0 [0101.634] GetKeyState (nVirtKey=5) returned 0 [0101.634] GetKeyState (nVirtKey=6) returned 0 [0101.634] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.634] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.634] WaitMessage () returned 1 [0101.675] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.675] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x2000156) returned 0x1 [0101.675] IsWindowUnicode (hWnd=0x102d4) returned 1 [0101.675] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.675] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x2000156) returned 0x1 [0101.675] SetCursor (hCursor=0x10003) returned 0x10003 [0101.675] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.675] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.675] GetKeyState (nVirtKey=1) returned 0 [0101.675] GetKeyState (nVirtKey=2) returned 1 [0101.675] GetKeyState (nVirtKey=4) returned 0 [0101.675] GetKeyState (nVirtKey=5) returned 0 [0101.675] GetKeyState (nVirtKey=6) returned 0 [0101.675] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.675] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.675] WaitMessage () returned 1 [0101.676] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.676] IsWindowUnicode (hWnd=0x102d6) returned 1 [0101.676] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.677] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.677] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.677] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.677] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.677] WaitMessage () returned 1 [0101.692] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.692] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x200015e) returned 0x1 [0101.692] IsWindowUnicode (hWnd=0x102d4) returned 1 [0101.692] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.692] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x200015e) returned 0x1 [0101.693] SetCursor (hCursor=0x10003) returned 0x10003 [0101.693] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.693] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.693] GetKeyState (nVirtKey=1) returned 0 [0101.693] GetKeyState (nVirtKey=2) returned 1 [0101.693] GetKeyState (nVirtKey=4) returned 0 [0101.693] GetKeyState (nVirtKey=5) returned 0 [0101.693] GetKeyState (nVirtKey=6) returned 0 [0101.693] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.693] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.693] WaitMessage () returned 1 [0101.725] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.725] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1ff016a) returned 0x1 [0101.726] IsWindowUnicode (hWnd=0x102d4) returned 1 [0101.726] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.726] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1ff016a) returned 0x1 [0101.726] SetCursor (hCursor=0x10003) returned 0x10003 [0101.726] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.726] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.726] GetKeyState (nVirtKey=1) returned 0 [0101.727] GetKeyState (nVirtKey=2) returned 1 [0101.727] GetKeyState (nVirtKey=4) returned 0 [0101.727] GetKeyState (nVirtKey=5) returned 0 [0101.727] GetKeyState (nVirtKey=6) returned 0 [0101.727] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.727] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.727] WaitMessage () returned 1 [0101.755] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.755] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1fd016a) returned 0x1 [0101.755] IsWindowUnicode (hWnd=0x102d4) returned 1 [0101.755] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.756] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1fd016a) returned 0x1 [0101.756] SetCursor (hCursor=0x10003) returned 0x10003 [0101.756] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.756] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.756] GetKeyState (nVirtKey=1) returned 0 [0101.756] GetKeyState (nVirtKey=2) returned 1 [0101.756] GetKeyState (nVirtKey=4) returned 0 [0101.756] GetKeyState (nVirtKey=5) returned 0 [0101.756] GetKeyState (nVirtKey=6) returned 0 [0101.757] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.757] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.757] WaitMessage () returned 1 [0101.787] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.787] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1fc016a) returned 0x1 [0101.787] IsWindowUnicode (hWnd=0x102d4) returned 1 [0101.787] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.788] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1fc016a) returned 0x1 [0101.788] SetCursor (hCursor=0x10003) returned 0x10003 [0101.788] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.788] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.788] GetKeyState (nVirtKey=1) returned 0 [0101.788] GetKeyState (nVirtKey=2) returned 1 [0101.788] GetKeyState (nVirtKey=4) returned 0 [0101.788] GetKeyState (nVirtKey=5) returned 0 [0101.789] GetKeyState (nVirtKey=6) returned 0 [0101.789] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.789] IsWindowUnicode (hWnd=0x102d6) returned 1 [0101.789] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.789] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.789] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.789] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.789] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.790] WaitMessage () returned 1 [0101.814] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.814] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f50167) returned 0x1 [0101.814] IsWindowUnicode (hWnd=0x102d4) returned 1 [0101.814] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.815] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f50167) returned 0x1 [0101.815] SetCursor (hCursor=0x10003) returned 0x10003 [0101.815] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.815] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.815] GetKeyState (nVirtKey=1) returned 0 [0101.815] GetKeyState (nVirtKey=2) returned 1 [0101.815] GetKeyState (nVirtKey=4) returned 0 [0101.815] GetKeyState (nVirtKey=5) returned 0 [0101.815] GetKeyState (nVirtKey=6) returned 0 [0101.816] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.816] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.816] WaitMessage () returned 1 [0101.882] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.882] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f20162) returned 0x1 [0101.882] IsWindowUnicode (hWnd=0x102d4) returned 1 [0101.882] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.882] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f20162) returned 0x1 [0101.882] SetCursor (hCursor=0x10003) returned 0x10003 [0101.883] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.883] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.883] GetKeyState (nVirtKey=1) returned 0 [0101.883] GetKeyState (nVirtKey=2) returned 1 [0101.883] GetKeyState (nVirtKey=4) returned 0 [0101.883] GetKeyState (nVirtKey=5) returned 0 [0101.883] GetKeyState (nVirtKey=6) returned 0 [0101.883] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.884] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.884] WaitMessage () returned 1 [0101.896] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.896] IsWindowUnicode (hWnd=0x102d6) returned 1 [0101.896] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.896] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.896] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.897] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.897] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.897] WaitMessage () returned 1 [0101.990] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.990] IsWindowUnicode (hWnd=0x102d4) returned 1 [0101.990] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.990] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.990] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.990] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.990] IsWindowUnicode (hWnd=0x102d4) returned 1 [0101.990] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0101.991] TranslateMessage (lpMsg=0x119f22c) returned 0 [0101.991] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0101.991] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x2a1, wParam=0x0, lParam=0x1100e9) returned 0x0 [0101.991] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.991] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0101.991] WaitMessage () returned 1 [0102.005] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.005] IsWindowUnicode (hWnd=0x102d6) returned 1 [0102.005] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.005] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.005] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.005] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.005] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.006] WaitMessage () returned 1 [0102.014] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.014] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f10162) returned 0x1 [0102.014] IsWindowUnicode (hWnd=0x102d4) returned 1 [0102.014] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.014] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f10162) returned 0x1 [0102.014] SetCursor (hCursor=0x10003) returned 0x10003 [0102.015] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.015] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.015] GetKeyState (nVirtKey=1) returned 0 [0102.015] GetKeyState (nVirtKey=2) returned 1 [0102.015] GetKeyState (nVirtKey=4) returned 0 [0102.015] GetKeyState (nVirtKey=5) returned 0 [0102.015] GetKeyState (nVirtKey=6) returned 0 [0102.015] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.015] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.016] WaitMessage () returned 1 [0102.065] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.065] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1ea0162) returned 0x1 [0102.065] IsWindowUnicode (hWnd=0x102d4) returned 1 [0102.065] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.065] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1ea0162) returned 0x1 [0102.066] SetCursor (hCursor=0x10003) returned 0x10003 [0102.066] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.066] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.066] GetKeyState (nVirtKey=1) returned 0 [0102.066] GetKeyState (nVirtKey=2) returned 1 [0102.066] GetKeyState (nVirtKey=4) returned 0 [0102.066] GetKeyState (nVirtKey=5) returned 0 [0102.066] GetKeyState (nVirtKey=6) returned 0 [0102.066] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.066] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.066] WaitMessage () returned 1 [0102.083] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.083] IsWindowUnicode (hWnd=0x102b8) returned 1 [0102.083] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.083] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.083] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.083] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.083] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.083] WaitMessage () returned 1 [0102.117] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.117] IsWindowUnicode (hWnd=0x102d6) returned 1 [0102.117] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.117] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.117] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.117] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.118] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.118] WaitMessage () returned 1 [0102.223] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.223] IsWindowUnicode (hWnd=0x102d6) returned 1 [0102.223] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.223] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.223] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.223] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.223] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.223] WaitMessage () returned 1 [0102.333] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.333] IsWindowUnicode (hWnd=0x102d6) returned 1 [0102.333] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.333] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.333] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.334] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.334] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.334] WaitMessage () returned 1 [0102.443] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.443] IsWindowUnicode (hWnd=0x102d6) returned 1 [0102.443] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.443] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.443] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.443] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.444] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.444] WaitMessage () returned 1 [0102.472] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.472] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1ea0162) returned 0x1 [0102.472] IsWindowUnicode (hWnd=0x102d4) returned 1 [0102.472] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.473] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1ea0162) returned 0x1 [0102.473] GetDlgItem (hDlg=0x30258, nIDDlgItem=0) returned 0x0 [0102.473] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x210, wParam=0x201, lParam=0x16800f7) returned 0x0 [0102.473] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x21, wParam=0x30258, lParam=0x2010001) returned 0x1 [0102.473] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x21, wParam=0x30258, lParam=0x2010001) returned 0x1 [0102.474] SetCursor (hCursor=0x10003) returned 0x10003 [0102.474] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.474] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.474] GetKeyState (nVirtKey=1) returned -127 [0102.474] GetKeyState (nVirtKey=2) returned 1 [0102.474] GetKeyState (nVirtKey=4) returned 0 [0102.474] GetKeyState (nVirtKey=5) returned 0 [0102.474] GetKeyState (nVirtKey=6) returned 0 [0102.474] IsWindowVisible (hWnd=0x102d4) returned 1 [0102.474] IsWindowEnabled (hWnd=0x102d4) returned 1 [0102.475] SetFocus (hWnd=0x102d4) returned 0x102b8 [0102.475] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x8, wParam=0x102d4, lParam=0x0) returned 0x1 [0102.475] SendMessageW (hWnd=0x102b8, Msg=0x2111, wParam=0x20002b8, lParam=0x102b8) returned 0x0 [0102.475] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0102.476] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0102.476] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0102.476] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0102.476] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0102.476] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x282, wParam=0xf, lParam=0x1200e7) returned 0x0 [0102.477] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0102.477] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0102.477] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x7, wParam=0x102b8, lParam=0x0) returned 0x0 [0102.477] GetStockObject (i=5) returned 0x1900015 [0102.477] GetDlgItem (hDlg=0x30258, nIDDlgItem=66260) returned 0x102d4 [0102.477] SendMessageW (hWnd=0x102d4, Msg=0x202b, wParam=0x102d4, lParam=0x119e8f4) returned 0x0 [0102.477] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x202b, wParam=0x102d4, lParam=0x119e8f4) returned 0x0 [0102.477] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0102.477] GetFocus () returned 0x102d4 [0102.477] GetFocus () returned 0x102d4 [0102.477] GetFocus () returned 0x102d4 [0102.477] GetKeyState (nVirtKey=1) returned -127 [0102.477] GetKeyState (nVirtKey=2) returned 1 [0102.477] GetKeyState (nVirtKey=4) returned 0 [0102.477] GetKeyState (nVirtKey=5) returned 0 [0102.477] GetKeyState (nVirtKey=6) returned 0 [0102.477] GetCapture () returned 0x0 [0102.477] SetCapture (hWnd=0x102d4) returned 0x0 [0102.477] GetKeyState (nVirtKey=1) returned -127 [0102.477] GetKeyState (nVirtKey=2) returned 1 [0102.477] GetKeyState (nVirtKey=4) returned 0 [0102.477] GetKeyState (nVirtKey=5) returned 0 [0102.477] GetKeyState (nVirtKey=6) returned 0 [0102.477] NotifyWinEvent (event=0x800a, hwnd=0x102d4, idObject=-4, idChild=0) [0102.477] InvalidateRect (hWnd=0x102d4, lpRect=0x119eeb4, bErase=0) returned 1 [0102.478] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.478] IsWindowUnicode (hWnd=0x102d4) returned 1 [0102.478] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.478] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.478] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.478] BeginPaint (in: hWnd=0x102d4, lpPaint=0x119ed10 | out: lpPaint=0x119ed10) returned 0x470108fd [0102.478] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0102.478] CreateCompatibleDC (hdc=0x470108fd) returned 0x4f01089d [0102.478] GetObjectType (h=0x470108fd) returned 0x3 [0102.478] CreateCompatibleBitmap (hdc=0x470108fd, cx=1, cy=1) returned 0x240508f4 [0102.478] GetDIBits (in: hdc=0x470108fd, hbm=0x240508f4, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0102.478] GetDIBits (in: hdc=0x470108fd, hbm=0x240508f4, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0102.478] DeleteObject (ho=0x240508f4) returned 1 [0102.478] CreateDIBSection (in: hdc=0x470108fd, lpbmi=0x119e7f0, usage=0x0, ppvBits=0x119ece4, hSection=0x0, offset=0x0 | out: ppvBits=0x119ece4) returned 0x49050882 [0102.478] SelectObject (hdc=0x4f01089d, h=0x49050882) returned 0x185000f [0102.478] GdipCreateFromHDC (hdc=0x4f01089d, graphics=0x119ecc8) returned 0x0 [0102.478] GdipTranslateWorldTransform (graphics=0x5608768, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0102.478] GdipSetClipRectI (graphics=0x5608768, x=0, y=0, width=711, height=36, combineMode=0x0) returned 0x0 [0102.478] GdipCreateMatrix (matrix=0x119ed70) returned 0x0 [0102.478] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608b78) returned 0x0 [0102.478] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119ed88) returned 0x0 [0102.478] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0102.478] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x15d6520) returned 0x0 [0102.478] LocalFree (hMem=0x15d6520) returned 0x0 [0102.478] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0102.478] GdipCreateRegion (region=0x119ed70) returned 0x0 [0102.479] GdipGetClip (graphics=0x5608768, region=0x56034a8) returned 0x0 [0102.479] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ed7c) returned 0x0 [0102.479] GdipSaveGraphics (graphics=0x5608768, state=0x119eda8) returned 0x0 [0102.479] GdipRestoreGraphics (graphics=0x5608768, state=0xfd820dbd) returned 0x0 [0102.479] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0102.479] GdipGetDC (graphics=0x5608768, hdc=0x119eac8) returned 0x0 [0102.479] GetCurrentObject (hdc=0x4f01089d, type=0x1) returned 0x1b00017 [0102.479] GetCurrentObject (hdc=0x4f01089d, type=0x2) returned 0x1900010 [0102.479] GetCurrentObject (hdc=0x4f01089d, type=0x7) returned 0x49050882 [0102.479] GetCurrentObject (hdc=0x4f01089d, type=0x6) returned 0x18a0048 [0102.479] SaveDC (hdc=0x4f01089d) returned 1 [0102.479] GetNearestColor (hdc=0x4f01089d, color=0xc0) returned 0xc0 [0102.479] GetNearestColor (hdc=0x4f01089d, color=0x40) returned 0x40 [0102.479] GetNearestColor (hdc=0x4f01089d, color=0x0) returned 0x0 [0102.479] GetNearestColor (hdc=0x4f01089d, color=0x5656e5) returned 0x5656e5 [0102.479] GetNearestColor (hdc=0x4f01089d, color=0x0) returned 0x0 [0102.479] GetNearestColor (hdc=0x4f01089d, color=0x6060ff) returned 0x6060ff [0102.479] GetNearestColor (hdc=0x4f01089d, color=0x5656e5) returned 0x5656e5 [0102.479] GetNearestColor (hdc=0x4f01089d, color=0xe6) returned 0xe6 [0102.479] GetNearestColor (hdc=0x4f01089d, color=0x0) returned 0x0 [0102.479] RestoreDC (hdc=0x4f01089d, nSavedDC=-1) returned 1 [0102.479] GdipReleaseDC (graphics=0x5608768, hdc=0x4f01089d) returned 0x0 [0102.479] DrawTextExW (in: hdc=0x490108ba, lpchText="Decrypt", cchText=7, lprc=0x119e96c, format=0x102415, lpdtp=0x2ef333c | out: lpchText="Decrypt", lprc=0x119e96c) returned 13 [0102.479] GdipCreateRegion (region=0x119e9c0) returned 0x0 [0102.479] GdipGetClip (graphics=0x5608768, region=0x56034a8) returned 0x0 [0102.479] GdipCreateMatrix (matrix=0x119e9c0) returned 0x0 [0102.479] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608ba8) returned 0x0 [0102.479] GdipIsMatrixIdentity (matrix=0x5608ba8, result=0x119e9d8) returned 0x0 [0102.479] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0102.479] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6520) returned 0x0 [0102.479] LocalFree (hMem=0x15d6520) returned 0x0 [0102.479] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0102.479] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6050) returned 0x0 [0102.479] LocalFree (hMem=0x15d6050) returned 0x0 [0102.480] GdipDeleteMatrix (matrix=0x5608ba8) returned 0x0 [0102.480] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ea04) returned 0x0 [0102.480] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119e9f4) returned 0x0 [0102.480] GdipGetRegionHRgn (region=0x56034a8, graphics=0x5608768, hRgn=0x119e9f4) returned 0x0 [0102.480] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0102.480] GdipGetDC (graphics=0x5608768, hdc=0x119ea0c) returned 0x0 [0102.480] GetCurrentObject (hdc=0x4f01089d, type=0x1) returned 0x1b00017 [0102.480] GetCurrentObject (hdc=0x4f01089d, type=0x2) returned 0x1900010 [0102.480] GetCurrentObject (hdc=0x4f01089d, type=0x7) returned 0x49050882 [0102.480] GetCurrentObject (hdc=0x4f01089d, type=0x6) returned 0x18a0048 [0102.480] SaveDC (hdc=0x4f01089d) returned 1 [0102.480] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x670408c1 [0102.480] GetClipRgn (hdc=0x4f01089d, hrgn=0x670408c1) returned 0 [0102.480] SelectClipRgn (hdc=0x4f01089d, hrgn=0x76040894) returned 2 [0102.480] DeleteObject (ho=0x670408c1) returned 1 [0102.480] DeleteObject (ho=0x76040894) returned 1 [0102.480] OffsetViewportOrgEx (in: hdc=0x4f01089d, x=0, y=0, lppt=0x2ef3534 | out: lppt=0x2ef3534) returned 1 [0102.480] GetNearestColor (hdc=0x4f01089d, color=0x5656e5) returned 0x5656e5 [0102.480] CreateSolidBrush (color=0x5656e5) returned 0x4410086a [0102.480] FillRect (hDC=0x4f01089d, lprc=0x119ea10, hbr=0x4410086a) returned 1 [0102.480] DeleteObject (ho=0x4410086a) returned 1 [0102.480] RestoreDC (hdc=0x4f01089d, nSavedDC=-1) returned 1 [0102.481] GdipReleaseDC (graphics=0x5608768, hdc=0x4f01089d) returned 0x0 [0102.481] GdipGetTextRenderingHint (graphics=0x5608768, mode=0x119ea8c) returned 0x0 [0102.481] GdipGetDC (graphics=0x5608768, hdc=0x119ea78) returned 0x0 [0102.481] GetCurrentObject (hdc=0x4f01089d, type=0x1) returned 0x1b00017 [0102.481] GetCurrentObject (hdc=0x4f01089d, type=0x2) returned 0x1900010 [0102.481] GetCurrentObject (hdc=0x4f01089d, type=0x7) returned 0x49050882 [0102.481] GetCurrentObject (hdc=0x4f01089d, type=0x6) returned 0x18a0048 [0102.481] SaveDC (hdc=0x4f01089d) returned 1 [0102.481] GetTextAlign (hdc=0x4f01089d) returned 0x0 [0102.481] GetTextColor (hdc=0x4f01089d) returned 0x0 [0102.481] GetCurrentObject (hdc=0x4f01089d, type=0x6) returned 0x18a0048 [0102.481] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e7d8 | out: pv=0x119e7d8) returned 92 [0102.481] SelectObject (hdc=0x4f01089d, h=0xb20a08b8) returned 0x18a0048 [0102.481] GetBkMode (hdc=0x4f01089d) returned 2 [0102.481] SetBkMode (hdc=0x4f01089d, mode=1) returned 2 [0102.481] DrawTextExW (in: hdc=0x4f01089d, lpchText="Decrypt", cchText=7, lprc=0x119e8bc, format=0x102415, lpdtp=0x2ef3794 | out: lpchText="Decrypt", lprc=0x119e8bc) returned 13 [0102.481] DrawTextExW (in: hdc=0x4f01089d, lpchText="Decrypt", cchText=7, lprc=0x119ea0c, format=0x102015, lpdtp=0x2ef3794 | out: lpchText="Decrypt", lprc=0x119ea0c) returned 13 [0102.481] RestoreDC (hdc=0x4f01089d, nSavedDC=-1) returned 1 [0102.481] GdipReleaseDC (graphics=0x5608768, hdc=0x4f01089d) returned 0x0 [0102.481] GetFocus () returned 0x102d4 [0102.481] GetFocus () returned 0x102d4 [0102.481] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb10) returned 0x0 [0102.481] GdipDrawRectangleI (graphics=0x5608768, pen=0x5603418, x=0, y=0, width=710, height=35) returned 0x0 [0102.481] GdipDeletePen (pen=0x5603418) returned 0x0 [0102.481] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eaf0) returned 0x0 [0102.481] GdipDrawRectangleI (graphics=0x5608768, pen=0x5603418, x=1, y=1, width=708, height=33) returned 0x0 [0102.481] GdipDeletePen (pen=0x5603418) returned 0x0 [0102.481] GdipGetDC (graphics=0x5608768, hdc=0x119ed68) returned 0x0 [0102.481] BitBlt (hdc=0x470108fd, x=0, y=0, cx=711, cy=36, hdcSrc=0x4f01089d, x1=0, y1=0, rop=0xcc0020) returned 1 [0102.482] GdipReleaseDC (graphics=0x5608768, hdc=0x4f01089d) returned 0x0 [0102.482] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0102.482] SelectObject (hdc=0x4f01089d, h=0x185000f) returned 0x49050882 [0102.482] DeleteDC (hdc=0x4f01089d) returned 1 [0102.482] GdipDeleteGraphics (graphics=0x5608768) returned 0x0 [0102.482] DeleteObject (ho=0x49050882) returned 1 [0102.482] EndPaint (hWnd=0x102d4, lpPaint=0x119ed0c) returned 1 [0102.482] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.482] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.482] WaitMessage () returned 1 [0102.519] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.519] IsWindowUnicode (hWnd=0x102d4) returned 1 [0102.519] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.519] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.519] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.519] MapWindowPoints (in: hWndFrom=0x102d4, hWndTo=0x0, lpPoints=0x2ef383c, cPoints=0x1 | out: lpPoints=0x2ef383c) returned 31522937 [0102.519] NotifyWinEvent (event=0x800a, hwnd=0x102d4, idObject=-4, idChild=0) [0102.519] InvalidateRect (hWnd=0x102d4, lpRect=0x119ee58, bErase=0) returned 1 [0102.519] UpdateWindow (hWnd=0x102d4) returned 1 [0102.519] BeginPaint (in: hWnd=0x102d4, lpPaint=0x119ea08 | out: lpPaint=0x119ea08) returned 0x470108fd [0102.519] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0102.519] CreateCompatibleDC (hdc=0x470108fd) returned 0x260108f4 [0102.519] GetObjectType (h=0x470108fd) returned 0x3 [0102.520] CreateCompatibleBitmap (hdc=0x470108fd, cx=1, cy=1) returned 0x4a050882 [0102.520] GetDIBits (in: hdc=0x470108fd, hbm=0x4a050882, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e498, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e498) returned 1 [0102.520] GetDIBits (in: hdc=0x470108fd, hbm=0x4a050882, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e498, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e498) returned 1 [0102.520] DeleteObject (ho=0x4a050882) returned 1 [0102.520] CreateDIBSection (in: hdc=0x470108fd, lpbmi=0x119e4e8, usage=0x0, ppvBits=0x119e9dc, hSection=0x0, offset=0x0 | out: ppvBits=0x119e9dc) returned 0x5005089d [0102.520] SelectObject (hdc=0x260108f4, h=0x5005089d) returned 0x185000f [0102.520] GdipCreateFromHDC (hdc=0x260108f4, graphics=0x119e9c0) returned 0x0 [0102.521] GdipTranslateWorldTransform (graphics=0x5608768, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0102.521] GdipSetClipRectI (graphics=0x5608768, x=0, y=0, width=711, height=36, combineMode=0x0) returned 0x0 [0102.521] GdipCreateMatrix (matrix=0x119ea68) returned 0x0 [0102.521] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608b78) returned 0x0 [0102.521] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119ea80) returned 0x0 [0102.521] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0102.521] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x15d6050) returned 0x0 [0102.521] LocalFree (hMem=0x15d6050) returned 0x0 [0102.521] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0102.521] GdipCreateRegion (region=0x119ea68) returned 0x0 [0102.521] GdipGetClip (graphics=0x5608768, region=0x56034a8) returned 0x0 [0102.521] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ea74) returned 0x0 [0102.521] GdipSaveGraphics (graphics=0x5608768, state=0x119eaa0) returned 0x0 [0102.521] GdipRestoreGraphics (graphics=0x5608768, state=0xfd800dbd) returned 0x0 [0102.521] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0102.521] GdipGetDC (graphics=0x5608768, hdc=0x119e84c) returned 0x0 [0102.521] GetCurrentObject (hdc=0x260108f4, type=0x1) returned 0x1b00017 [0102.522] GetCurrentObject (hdc=0x260108f4, type=0x2) returned 0x1900010 [0102.522] GetCurrentObject (hdc=0x260108f4, type=0x7) returned 0x5005089d [0102.522] GetCurrentObject (hdc=0x260108f4, type=0x6) returned 0x18a0048 [0102.522] SaveDC (hdc=0x260108f4) returned 1 [0102.522] GetNearestColor (hdc=0x260108f4, color=0xc0) returned 0xc0 [0102.522] GetNearestColor (hdc=0x260108f4, color=0x40) returned 0x40 [0102.522] GetNearestColor (hdc=0x260108f4, color=0x0) returned 0x0 [0102.522] GetNearestColor (hdc=0x260108f4, color=0x5656e5) returned 0x5656e5 [0102.522] GetNearestColor (hdc=0x260108f4, color=0x0) returned 0x0 [0102.522] GetNearestColor (hdc=0x260108f4, color=0x6060ff) returned 0x6060ff [0102.522] GetNearestColor (hdc=0x260108f4, color=0x5656e5) returned 0x5656e5 [0102.522] GetNearestColor (hdc=0x260108f4, color=0xe6) returned 0xe6 [0102.522] GetNearestColor (hdc=0x260108f4, color=0x0) returned 0x0 [0102.522] RestoreDC (hdc=0x260108f4, nSavedDC=-1) returned 1 [0102.522] GdipReleaseDC (graphics=0x5608768, hdc=0x260108f4) returned 0x0 [0102.522] DrawTextExW (in: hdc=0x490108ba, lpchText="Decrypt", cchText=7, lprc=0x119e6f0, format=0x102415, lpdtp=0x2ef4e44 | out: lpchText="Decrypt", lprc=0x119e6f0) returned 13 [0102.523] GdipCreateRegion (region=0x119e744) returned 0x0 [0102.523] GdipGetClip (graphics=0x5608768, region=0x56034a8) returned 0x0 [0102.523] GdipCreateMatrix (matrix=0x119e744) returned 0x0 [0102.523] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608ba8) returned 0x0 [0102.523] GdipIsMatrixIdentity (matrix=0x5608ba8, result=0x119e75c) returned 0x0 [0102.523] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0102.523] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6520) returned 0x0 [0102.523] LocalFree (hMem=0x15d6520) returned 0x0 [0102.523] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0102.523] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6520) returned 0x0 [0102.523] LocalFree (hMem=0x15d6520) returned 0x0 [0102.523] GdipDeleteMatrix (matrix=0x5608ba8) returned 0x0 [0102.523] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119e788) returned 0x0 [0102.523] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119e778) returned 0x0 [0102.523] GdipGetRegionHRgn (region=0x56034a8, graphics=0x5608768, hRgn=0x119e778) returned 0x0 [0102.523] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0102.523] GdipGetDC (graphics=0x5608768, hdc=0x119e790) returned 0x0 [0102.523] GetCurrentObject (hdc=0x260108f4, type=0x1) returned 0x1b00017 [0102.523] GetCurrentObject (hdc=0x260108f4, type=0x2) returned 0x1900010 [0102.523] GetCurrentObject (hdc=0x260108f4, type=0x7) returned 0x5005089d [0102.524] GetCurrentObject (hdc=0x260108f4, type=0x6) returned 0x18a0048 [0102.524] SaveDC (hdc=0x260108f4) returned 1 [0102.524] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x77040894 [0102.524] GetClipRgn (hdc=0x260108f4, hrgn=0x77040894) returned 0 [0102.524] SelectClipRgn (hdc=0x260108f4, hrgn=0x6b0408c1) returned 2 [0102.524] DeleteObject (ho=0x77040894) returned 1 [0102.524] DeleteObject (ho=0x6b0408c1) returned 1 [0102.524] OffsetViewportOrgEx (in: hdc=0x260108f4, x=0, y=0, lppt=0x2ef503c | out: lppt=0x2ef503c) returned 1 [0102.524] GetNearestColor (hdc=0x260108f4, color=0xe6) returned 0xe6 [0102.524] CreateSolidBrush (color=0xe6) returned 0x4510086a [0102.524] FillRect (hDC=0x260108f4, lprc=0x119e794, hbr=0x4510086a) returned 1 [0102.525] DeleteObject (ho=0x4510086a) returned 1 [0102.525] RestoreDC (hdc=0x260108f4, nSavedDC=-1) returned 1 [0102.525] GdipReleaseDC (graphics=0x5608768, hdc=0x260108f4) returned 0x0 [0102.525] GdipGetTextRenderingHint (graphics=0x5608768, mode=0x119e810) returned 0x0 [0102.525] GdipGetDC (graphics=0x5608768, hdc=0x119e7fc) returned 0x0 [0102.525] GetCurrentObject (hdc=0x260108f4, type=0x1) returned 0x1b00017 [0102.525] GetCurrentObject (hdc=0x260108f4, type=0x2) returned 0x1900010 [0102.525] GetCurrentObject (hdc=0x260108f4, type=0x7) returned 0x5005089d [0102.525] GetCurrentObject (hdc=0x260108f4, type=0x6) returned 0x18a0048 [0102.526] SaveDC (hdc=0x260108f4) returned 1 [0102.526] GetTextAlign (hdc=0x260108f4) returned 0x0 [0102.526] GetTextColor (hdc=0x260108f4) returned 0x0 [0102.526] GetCurrentObject (hdc=0x260108f4, type=0x6) returned 0x18a0048 [0102.526] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e55c | out: pv=0x119e55c) returned 92 [0102.526] SelectObject (hdc=0x260108f4, h=0xb20a08b8) returned 0x18a0048 [0102.526] GetBkMode (hdc=0x260108f4) returned 2 [0102.526] SetBkMode (hdc=0x260108f4, mode=1) returned 2 [0102.526] DrawTextExW (in: hdc=0x260108f4, lpchText="Decrypt", cchText=7, lprc=0x119e640, format=0x102415, lpdtp=0x2ef529c | out: lpchText="Decrypt", lprc=0x119e640) returned 13 [0102.526] DrawTextExW (in: hdc=0x260108f4, lpchText="Decrypt", cchText=7, lprc=0x119e790, format=0x102015, lpdtp=0x2ef529c | out: lpchText="Decrypt", lprc=0x119e790) returned 13 [0102.526] RestoreDC (hdc=0x260108f4, nSavedDC=-1) returned 1 [0102.527] GdipReleaseDC (graphics=0x5608768, hdc=0x260108f4) returned 0x0 [0102.527] GetFocus () returned 0x102d4 [0102.527] GetFocus () returned 0x102d4 [0102.527] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119e894) returned 0x0 [0102.527] GdipDrawRectangleI (graphics=0x5608768, pen=0x5603418, x=0, y=0, width=710, height=35) returned 0x0 [0102.527] GdipDeletePen (pen=0x5603418) returned 0x0 [0102.527] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119e874) returned 0x0 [0102.527] GdipDrawRectangleI (graphics=0x5608768, pen=0x5603418, x=1, y=1, width=708, height=33) returned 0x0 [0102.527] GdipDeletePen (pen=0x5603418) returned 0x0 [0102.527] GdipGetDC (graphics=0x5608768, hdc=0x119ea60) returned 0x0 [0102.527] BitBlt (hdc=0x470108fd, x=0, y=0, cx=711, cy=36, hdcSrc=0x260108f4, x1=0, y1=0, rop=0xcc0020) returned 1 [0102.527] GdipReleaseDC (graphics=0x5608768, hdc=0x260108f4) returned 0x0 [0102.527] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0102.528] SelectObject (hdc=0x260108f4, h=0x185000f) returned 0x5005089d [0102.528] DeleteDC (hdc=0x260108f4) returned 1 [0102.528] GdipDeleteGraphics (graphics=0x5608768) returned 0x0 [0102.528] DeleteObject (ho=0x5005089d) returned 1 [0102.529] EndPaint (hWnd=0x102d4, lpPaint=0x119ea04) returned 1 [0102.529] MapWindowPoints (in: hWndFrom=0x102d4, hWndTo=0x0, lpPoints=0x2ef5320, cPoints=0x1 | out: lpPoints=0x2ef5320) returned 31522937 [0102.529] WindowFromPoint (Point=0x162) returned 0x102d4 [0102.529] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1ea0162) returned 0x1 [0102.529] NotifyWinEvent (event=0x800a, hwnd=0x102d4, idObject=-4, idChild=0) [0102.529] NotifyWinEvent (event=0x800c, hwnd=0x102d4, idObject=-4, idChild=0) [0102.533] GetModuleHandleW (lpModuleName=0x0) returned 0xfb0000 [0102.533] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.2bf8098_r11_ad1", lpWindowName="TimerNativeWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0xfb0000, lpParam=0x0) returned 0x40256 [0102.533] SetWindowLongW (hWnd=0x40256, nIndex=-4, dwNewLong=1949416938) returned 89340318 [0102.534] GetWindowLongW (hWnd=0x40256, nIndex=-4) returned 1949416938 [0102.534] SetWindowLongW (hWnd=0x40256, nIndex=-4, dwNewLong=89340598) returned 1949416938 [0102.534] GetWindowLongW (hWnd=0x40256, nIndex=-4) returned 89340598 [0102.534] GetWindowLongW (hWnd=0x40256, nIndex=-16) returned 79691776 [0102.534] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x40256, Msg=0x24, wParam=0x0, lParam=0x119e864) returned 0x0 [0102.534] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x40256, Msg=0x81, wParam=0x0, lParam=0x119e858) returned 0x1 [0102.535] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x40256, Msg=0x83, wParam=0x0, lParam=0x119e844) returned 0x0 [0102.535] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x40256, Msg=0x1, wParam=0x0, lParam=0x119e858) returned 0x0 [0102.537] SetTimer (hWnd=0x40256, nIDEvent=0x2, uElapse=0xa, lpTimerFunc=0x0) returned 0x2 [0102.537] GetCapture () returned 0x102d4 [0102.537] ReleaseCapture () returned 1 [0102.538] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0102.538] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.538] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1ea0162) returned 0x1 [0102.538] IsWindowUnicode (hWnd=0x102d4) returned 1 [0102.538] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.538] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1ea0162) returned 0x1 [0102.538] SetCursor (hCursor=0x10003) returned 0x10003 [0102.538] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.539] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.539] GetKeyState (nVirtKey=1) returned 1 [0102.539] GetKeyState (nVirtKey=2) returned 1 [0102.539] GetKeyState (nVirtKey=4) returned 0 [0102.539] GetKeyState (nVirtKey=5) returned 0 [0102.539] GetKeyState (nVirtKey=6) returned 0 [0102.539] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.539] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.539] WaitMessage () returned 1 [0102.553] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.553] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.553] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.553] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.553] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.563] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x1, lParam=0x0) returned 0x0 [0102.563] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x1, lParam=0x0) returned 0x0 [0102.563] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.563] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.563] IsWindowUnicode (hWnd=0x102d6) returned 1 [0102.563] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.563] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.563] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.563] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.563] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.563] WaitMessage () returned 1 [0102.567] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.567] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.567] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.567] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.567] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.567] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x2, lParam=0x0) returned 0x1 [0102.567] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x2, lParam=0x0) returned 0x1 [0102.568] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.568] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.568] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.568] WaitMessage () returned 1 [0102.583] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.583] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.583] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.583] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.583] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.583] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x3, lParam=0x0) returned 0x2 [0102.584] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x3, lParam=0x0) returned 0x2 [0102.584] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.584] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.584] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.584] WaitMessage () returned 1 [0102.601] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.601] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.601] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.601] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.601] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.601] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x4, lParam=0x0) returned 0x3 [0102.601] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x4, lParam=0x0) returned 0x3 [0102.601] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.602] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.602] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.602] WaitMessage () returned 1 [0102.627] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.627] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.628] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.628] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.628] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.628] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x5, lParam=0x0) returned 0x4 [0102.628] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x5, lParam=0x0) returned 0x4 [0102.628] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.628] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.628] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.628] WaitMessage () returned 1 [0102.630] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.631] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.631] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.631] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.631] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.631] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x6, lParam=0x0) returned 0x5 [0102.631] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x6, lParam=0x0) returned 0x5 [0102.631] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.631] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.632] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.632] WaitMessage () returned 1 [0102.647] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.647] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.647] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.648] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.648] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.648] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x7, lParam=0x0) returned 0x6 [0102.648] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x7, lParam=0x0) returned 0x6 [0102.648] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.648] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.648] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.648] WaitMessage () returned 1 [0102.663] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.663] IsWindowUnicode (hWnd=0x102d6) returned 1 [0102.663] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.663] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.663] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.663] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.664] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.664] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.664] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.664] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.664] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x8, lParam=0x0) returned 0x7 [0102.664] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x8, lParam=0x0) returned 0x7 [0102.664] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.664] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.665] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.665] WaitMessage () returned 1 [0102.677] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.677] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.677] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.678] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.678] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.678] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x9, lParam=0x0) returned 0x8 [0102.678] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x9, lParam=0x0) returned 0x8 [0102.678] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.678] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.678] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.678] WaitMessage () returned 1 [0102.694] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.694] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.694] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.694] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.694] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.694] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0xa, lParam=0x0) returned 0x9 [0102.694] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0xa, lParam=0x0) returned 0x9 [0102.694] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.695] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.695] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.695] WaitMessage () returned 1 [0102.721] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.721] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.721] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.722] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.722] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.722] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0xb, lParam=0x0) returned 0xa [0102.722] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0xb, lParam=0x0) returned 0xa [0102.722] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.722] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.722] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.723] WaitMessage () returned 1 [0102.741] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.741] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.741] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.741] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.742] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.742] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0xc, lParam=0x0) returned 0xb [0102.742] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0xc, lParam=0x0) returned 0xb [0102.742] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.742] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.742] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.742] WaitMessage () returned 1 [0102.755] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.756] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.756] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.756] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.756] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.756] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0xd, lParam=0x0) returned 0xc [0102.756] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0xd, lParam=0x0) returned 0xc [0102.756] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.757] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.757] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.757] WaitMessage () returned 1 [0102.772] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.772] IsWindowUnicode (hWnd=0x102d6) returned 1 [0102.772] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.772] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.772] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.772] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.772] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.772] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.773] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.773] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.773] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0xe, lParam=0x0) returned 0xd [0102.773] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0xe, lParam=0x0) returned 0xd [0102.773] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.773] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.773] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.773] WaitMessage () returned 1 [0102.788] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.788] IsWindowUnicode (hWnd=0x202a6) returned 1 [0102.788] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.788] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.788] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.788] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.789] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.789] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.789] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.789] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.789] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0xf, lParam=0x0) returned 0xe [0102.789] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0xf, lParam=0x0) returned 0xe [0102.789] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.789] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.790] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.790] WaitMessage () returned 1 [0102.803] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.803] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.803] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.803] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.803] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.803] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x10, lParam=0x0) returned 0xf [0102.804] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x10, lParam=0x0) returned 0xf [0102.804] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.804] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.804] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.804] WaitMessage () returned 1 [0102.818] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.818] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.818] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.818] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.818] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.818] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x11, lParam=0x0) returned 0x10 [0102.818] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x11, lParam=0x0) returned 0x10 [0102.819] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.819] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.819] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.819] WaitMessage () returned 1 [0102.835] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.835] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.835] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.835] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.835] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.835] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x12, lParam=0x0) returned 0x11 [0102.835] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x12, lParam=0x0) returned 0x11 [0102.835] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.836] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.836] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.836] WaitMessage () returned 1 [0102.850] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.850] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.851] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.851] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.851] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.851] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x13, lParam=0x0) returned 0x12 [0102.851] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x13, lParam=0x0) returned 0x12 [0102.851] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.852] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.852] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.852] WaitMessage () returned 1 [0102.865] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.865] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.865] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.865] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.865] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.865] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x14, lParam=0x0) returned 0x13 [0102.865] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x14, lParam=0x0) returned 0x13 [0102.865] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.866] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.866] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.866] WaitMessage () returned 1 [0102.882] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.882] IsWindowUnicode (hWnd=0x102d6) returned 1 [0102.882] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.882] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.882] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.883] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.883] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.883] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.883] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.883] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.883] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x15, lParam=0x0) returned 0x14 [0102.883] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x15, lParam=0x0) returned 0x14 [0102.883] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.884] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.884] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.884] WaitMessage () returned 1 [0102.897] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.897] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.897] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.897] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.898] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.898] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x16, lParam=0x0) returned 0x15 [0102.898] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x16, lParam=0x0) returned 0x15 [0102.898] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.898] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.898] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.898] WaitMessage () returned 1 [0102.913] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.914] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.914] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.914] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.914] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.914] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x17, lParam=0x0) returned 0x16 [0102.914] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x17, lParam=0x0) returned 0x16 [0102.914] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.914] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.915] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.915] WaitMessage () returned 1 [0102.928] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.928] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.928] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.928] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.928] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.928] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x18, lParam=0x0) returned 0x17 [0102.929] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x18, lParam=0x0) returned 0x17 [0102.929] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.929] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.929] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.929] WaitMessage () returned 1 [0102.943] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.943] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.943] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.944] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.944] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.944] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x19, lParam=0x0) returned 0x18 [0102.944] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x19, lParam=0x0) returned 0x18 [0102.944] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.944] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.944] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.944] WaitMessage () returned 1 [0102.960] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.960] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.960] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.960] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.960] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.960] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x1a, lParam=0x0) returned 0x19 [0102.960] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x1a, lParam=0x0) returned 0x19 [0102.961] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.961] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.961] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.961] WaitMessage () returned 1 [0102.976] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.976] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.977] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.977] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.977] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.977] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x1b, lParam=0x0) returned 0x1a [0102.977] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x1b, lParam=0x0) returned 0x1a [0102.977] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.977] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.977] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.978] WaitMessage () returned 1 [0102.990] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.990] IsWindowUnicode (hWnd=0x102d6) returned 1 [0102.990] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.991] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.991] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.991] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.991] IsWindowUnicode (hWnd=0x40256) returned 1 [0102.991] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0102.991] TranslateMessage (lpMsg=0x119f22c) returned 0 [0102.991] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0102.991] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x1c, lParam=0x0) returned 0x1b [0102.991] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x1c, lParam=0x0) returned 0x1b [0102.992] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0102.992] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.992] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0102.992] WaitMessage () returned 1 [0103.005] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.006] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.006] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.006] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.006] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.006] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x1d, lParam=0x0) returned 0x1c [0103.006] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x1d, lParam=0x0) returned 0x1c [0103.006] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.006] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.007] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.007] WaitMessage () returned 1 [0103.022] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.022] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.022] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.023] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.023] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.023] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x1e, lParam=0x0) returned 0x1d [0103.023] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x1e, lParam=0x0) returned 0x1d [0103.023] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.023] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.023] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.023] WaitMessage () returned 1 [0103.037] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.037] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.037] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.037] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.037] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.037] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x1f, lParam=0x0) returned 0x1e [0103.037] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x1f, lParam=0x0) returned 0x1e [0103.037] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.038] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.038] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.038] WaitMessage () returned 1 [0103.057] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.057] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f50188) returned 0x1 [0103.057] IsWindowUnicode (hWnd=0x102d4) returned 1 [0103.057] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.058] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f50188) returned 0x1 [0103.058] SetCursor (hCursor=0x10003) returned 0x10003 [0103.058] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.058] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.058] GetKeyState (nVirtKey=1) returned 1 [0103.058] GetKeyState (nVirtKey=2) returned 1 [0103.058] GetKeyState (nVirtKey=4) returned 0 [0103.058] GetKeyState (nVirtKey=5) returned 0 [0103.058] GetKeyState (nVirtKey=6) returned 0 [0103.059] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.059] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.059] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.059] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.059] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.059] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x20, lParam=0x0) returned 0x1f [0103.059] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x20, lParam=0x0) returned 0x1f [0103.059] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.060] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.060] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.060] WaitMessage () returned 1 [0103.069] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.069] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.069] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.069] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.069] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.069] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x21, lParam=0x0) returned 0x20 [0103.069] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x21, lParam=0x0) returned 0x20 [0103.069] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.070] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.070] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.070] WaitMessage () returned 1 [0103.077] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.077] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f701a4) returned 0x1 [0103.078] IsWindowUnicode (hWnd=0x102d4) returned 1 [0103.078] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.078] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f701a4) returned 0x1 [0103.078] SetCursor (hCursor=0x10003) returned 0x10003 [0103.078] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.078] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.079] GetKeyState (nVirtKey=1) returned 1 [0103.079] GetKeyState (nVirtKey=2) returned 1 [0103.079] GetKeyState (nVirtKey=4) returned 0 [0103.079] GetKeyState (nVirtKey=5) returned 0 [0103.079] GetKeyState (nVirtKey=6) returned 0 [0103.079] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.079] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.079] WaitMessage () returned 1 [0103.087] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.087] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1fc01ce) returned 0x1 [0103.087] IsWindowUnicode (hWnd=0x102d4) returned 1 [0103.087] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.087] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1fc01ce) returned 0x1 [0103.087] SetCursor (hCursor=0x10003) returned 0x10003 [0103.088] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.088] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.088] GetKeyState (nVirtKey=1) returned 1 [0103.088] GetKeyState (nVirtKey=2) returned 1 [0103.088] GetKeyState (nVirtKey=4) returned 0 [0103.088] GetKeyState (nVirtKey=5) returned 0 [0103.088] GetKeyState (nVirtKey=6) returned 0 [0103.088] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.088] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.088] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.089] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.089] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.089] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x22, lParam=0x0) returned 0x21 [0103.089] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x22, lParam=0x0) returned 0x21 [0103.089] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.089] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.089] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.089] WaitMessage () returned 1 [0103.100] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.101] IsWindowUnicode (hWnd=0x102d6) returned 1 [0103.101] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.101] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.101] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.101] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.101] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.101] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.101] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.101] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.102] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x23, lParam=0x0) returned 0x22 [0103.102] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x23, lParam=0x0) returned 0x22 [0103.102] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.102] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.102] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.102] WaitMessage () returned 1 [0103.116] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.116] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1fe0256) returned 0x1 [0103.116] IsWindowUnicode (hWnd=0x102d4) returned 1 [0103.116] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.117] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1fe0256) returned 0x1 [0103.117] SetCursor (hCursor=0x10003) returned 0x10003 [0103.117] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.117] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.117] GetKeyState (nVirtKey=1) returned 1 [0103.117] GetKeyState (nVirtKey=2) returned 1 [0103.117] GetKeyState (nVirtKey=4) returned 0 [0103.117] GetKeyState (nVirtKey=5) returned 0 [0103.117] GetKeyState (nVirtKey=6) returned 0 [0103.118] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.118] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.118] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.118] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.118] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.118] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x24, lParam=0x0) returned 0x23 [0103.118] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x24, lParam=0x0) returned 0x23 [0103.118] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.119] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.119] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.119] WaitMessage () returned 1 [0103.130] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.131] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.131] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.131] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.131] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.131] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x25, lParam=0x0) returned 0x24 [0103.131] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x25, lParam=0x0) returned 0x24 [0103.131] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.131] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.132] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.132] WaitMessage () returned 1 [0103.144] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.144] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f102ba) returned 0x1 [0103.144] IsWindowUnicode (hWnd=0x102d4) returned 1 [0103.144] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.144] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f102ba) returned 0x1 [0103.145] SetCursor (hCursor=0x10003) returned 0x10003 [0103.145] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.147] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.147] GetKeyState (nVirtKey=1) returned 1 [0103.147] GetKeyState (nVirtKey=2) returned 1 [0103.147] GetKeyState (nVirtKey=4) returned 0 [0103.147] GetKeyState (nVirtKey=5) returned 0 [0103.147] GetKeyState (nVirtKey=6) returned 0 [0103.147] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.147] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.148] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.148] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.148] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.148] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x26, lParam=0x0) returned 0x25 [0103.148] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x26, lParam=0x0) returned 0x25 [0103.148] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.148] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.148] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.148] WaitMessage () returned 1 [0103.163] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.163] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.163] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.163] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.163] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.163] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x27, lParam=0x0) returned 0x26 [0103.163] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x27, lParam=0x0) returned 0x26 [0103.163] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.164] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.164] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.164] WaitMessage () returned 1 [0103.174] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.174] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1d10310) returned 0x12 [0103.174] IsWindowUnicode (hWnd=0x102b8) returned 1 [0103.174] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.175] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.175] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.175] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0103.175] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0103.175] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.175] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1d10310) returned 0x12 [0103.175] IsWindowUnicode (hWnd=0x102b8) returned 1 [0103.175] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.176] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1d10310) returned 0x12 [0103.176] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x20, wParam=0x102b8, lParam=0x2000012) returned 0x0 [0103.176] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x20, wParam=0x102b8, lParam=0x2000012) returned 0x0 [0103.176] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x102b8, lParam=0x2000012) returned 0x0 [0103.179] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.179] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.179] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xa0, wParam=0x12, lParam=0x1d10310) returned 0x0 [0103.179] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.179] IsWindowUnicode (hWnd=0x102d4) returned 1 [0103.179] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.179] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.179] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.179] BeginPaint (in: hWnd=0x102d4, lpPaint=0x119ed10 | out: lpPaint=0x119ed10) returned 0x470108fd [0103.180] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0103.180] CreateCompatibleDC (hdc=0x470108fd) returned 0x4d010882 [0103.180] GetObjectType (h=0x470108fd) returned 0x3 [0103.180] CreateCompatibleBitmap (hdc=0x470108fd, cx=1, cy=1) returned 0x5105089d [0103.180] GetDIBits (in: hdc=0x470108fd, hbm=0x5105089d, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0103.181] GetDIBits (in: hdc=0x470108fd, hbm=0x5105089d, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0103.181] DeleteObject (ho=0x5105089d) returned 1 [0103.181] CreateDIBSection (in: hdc=0x470108fd, lpbmi=0x119e7f0, usage=0x0, ppvBits=0x119ece4, hSection=0x0, offset=0x0 | out: ppvBits=0x119ece4) returned 0x270508f4 [0103.181] SelectObject (hdc=0x4d010882, h=0x270508f4) returned 0x185000f [0103.181] GdipCreateFromHDC (hdc=0x4d010882, graphics=0x119ecc8) returned 0x0 [0103.182] GdipTranslateWorldTransform (graphics=0x5608768, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0103.182] GdipSetClipRectI (graphics=0x5608768, x=0, y=0, width=711, height=36, combineMode=0x0) returned 0x0 [0103.182] GdipCreateMatrix (matrix=0x119ed70) returned 0x0 [0103.182] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608b78) returned 0x0 [0103.182] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119ed88) returned 0x0 [0103.182] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6050 [0103.182] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x15d6050) returned 0x0 [0103.182] LocalFree (hMem=0x15d6050) returned 0x0 [0103.183] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0103.183] GdipCreateRegion (region=0x119ed70) returned 0x0 [0103.183] GdipGetClip (graphics=0x5608768, region=0x56034a8) returned 0x0 [0103.183] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ed7c) returned 0x0 [0103.183] GdipSaveGraphics (graphics=0x5608768, state=0x119eda8) returned 0x0 [0103.183] GdipRestoreGraphics (graphics=0x5608768, state=0xfd7e0dbd) returned 0x0 [0103.183] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0103.183] GdipGetDC (graphics=0x5608768, hdc=0x119eaf8) returned 0x0 [0103.183] GetCurrentObject (hdc=0x4d010882, type=0x1) returned 0x1b00017 [0103.184] GetCurrentObject (hdc=0x4d010882, type=0x2) returned 0x1900010 [0103.184] GetCurrentObject (hdc=0x4d010882, type=0x7) returned 0x270508f4 [0103.184] GetCurrentObject (hdc=0x4d010882, type=0x6) returned 0x18a0048 [0103.184] SaveDC (hdc=0x4d010882) returned 1 [0103.184] GetNearestColor (hdc=0x4d010882, color=0xc0) returned 0xc0 [0103.184] GetNearestColor (hdc=0x4d010882, color=0x40) returned 0x40 [0103.184] GetNearestColor (hdc=0x4d010882, color=0x0) returned 0x0 [0103.184] GetNearestColor (hdc=0x4d010882, color=0x5656e5) returned 0x5656e5 [0103.184] GetNearestColor (hdc=0x4d010882, color=0x0) returned 0x0 [0103.185] GetNearestColor (hdc=0x4d010882, color=0x6060ff) returned 0x6060ff [0103.185] GetNearestColor (hdc=0x4d010882, color=0x5656e5) returned 0x5656e5 [0103.185] GetNearestColor (hdc=0x4d010882, color=0xe6) returned 0xe6 [0103.185] GetNearestColor (hdc=0x4d010882, color=0x0) returned 0x0 [0103.185] RestoreDC (hdc=0x4d010882, nSavedDC=-1) returned 1 [0103.185] GdipReleaseDC (graphics=0x5608768, hdc=0x4d010882) returned 0x0 [0103.185] DrawTextExW (in: hdc=0x490108ba, lpchText="Decrypt", cchText=7, lprc=0x119e99c, format=0x102415, lpdtp=0x2ef7798 | out: lpchText="Decrypt", lprc=0x119e99c) returned 13 [0103.185] GdipCreateRegion (region=0x119e9f0) returned 0x0 [0103.186] GdipGetClip (graphics=0x5608768, region=0x56034a8) returned 0x0 [0103.186] GdipCreateMatrix (matrix=0x119e9f0) returned 0x0 [0103.186] GdipGetWorldTransform (graphics=0x5608768, matrix=0x5608ba8) returned 0x0 [0103.186] GdipIsMatrixIdentity (matrix=0x5608ba8, result=0x119ea08) returned 0x0 [0103.186] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0103.186] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6520) returned 0x0 [0103.186] LocalFree (hMem=0x15d6520) returned 0x0 [0103.186] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x15d6520 [0103.186] GdipGetMatrixElements (matrix=0x5608ba8, matrixOut=0x15d6520) returned 0x0 [0103.187] LocalFree (hMem=0x15d6520) returned 0x0 [0103.187] GdipDeleteMatrix (matrix=0x5608ba8) returned 0x0 [0103.187] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ea34) returned 0x0 [0103.187] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5608768, result=0x119ea24) returned 0x0 [0103.187] GdipGetRegionHRgn (region=0x56034a8, graphics=0x5608768, hRgn=0x119ea24) returned 0x0 [0103.187] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0103.187] GdipGetDC (graphics=0x5608768, hdc=0x119ea3c) returned 0x0 [0103.187] GetCurrentObject (hdc=0x4d010882, type=0x1) returned 0x1b00017 [0103.187] GetCurrentObject (hdc=0x4d010882, type=0x2) returned 0x1900010 [0103.188] GetCurrentObject (hdc=0x4d010882, type=0x7) returned 0x270508f4 [0103.188] GetCurrentObject (hdc=0x4d010882, type=0x6) returned 0x18a0048 [0103.188] SaveDC (hdc=0x4d010882) returned 1 [0103.188] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c0408c1 [0103.188] GetClipRgn (hdc=0x4d010882, hrgn=0x6c0408c1) returned 0 [0103.188] SelectClipRgn (hdc=0x4d010882, hrgn=0x7b040894) returned 2 [0103.188] DeleteObject (ho=0x6c0408c1) returned 1 [0103.188] DeleteObject (ho=0x7b040894) returned 1 [0103.188] OffsetViewportOrgEx (in: hdc=0x4d010882, x=0, y=0, lppt=0x2ef7990 | out: lppt=0x2ef7990) returned 1 [0103.189] GetNearestColor (hdc=0x4d010882, color=0xc0) returned 0xc0 [0103.189] CreateSolidBrush (color=0xc0) returned 0x4610086a [0103.189] FillRect (hDC=0x4d010882, lprc=0x119ea40, hbr=0x4610086a) returned 1 [0103.190] DeleteObject (ho=0x4610086a) returned 1 [0103.190] RestoreDC (hdc=0x4d010882, nSavedDC=-1) returned 1 [0103.191] GdipReleaseDC (graphics=0x5608768, hdc=0x4d010882) returned 0x0 [0103.191] GdipGetTextRenderingHint (graphics=0x5608768, mode=0x119eabc) returned 0x0 [0103.191] GdipGetDC (graphics=0x5608768, hdc=0x119eaa8) returned 0x0 [0103.191] GetCurrentObject (hdc=0x4d010882, type=0x1) returned 0x1b00017 [0103.191] GetCurrentObject (hdc=0x4d010882, type=0x2) returned 0x1900010 [0103.191] GetCurrentObject (hdc=0x4d010882, type=0x7) returned 0x270508f4 [0103.191] GetCurrentObject (hdc=0x4d010882, type=0x6) returned 0x18a0048 [0103.191] SaveDC (hdc=0x4d010882) returned 1 [0103.191] GetTextAlign (hdc=0x4d010882) returned 0x0 [0103.192] GetTextColor (hdc=0x4d010882) returned 0x0 [0103.192] GetCurrentObject (hdc=0x4d010882, type=0x6) returned 0x18a0048 [0103.195] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e808 | out: pv=0x119e808) returned 92 [0103.195] SelectObject (hdc=0x4d010882, h=0xb20a08b8) returned 0x18a0048 [0103.195] GetBkMode (hdc=0x4d010882) returned 2 [0103.195] SetBkMode (hdc=0x4d010882, mode=1) returned 2 [0103.195] DrawTextExW (in: hdc=0x4d010882, lpchText="Decrypt", cchText=7, lprc=0x119e8ec, format=0x102415, lpdtp=0x2ef7bf0 | out: lpchText="Decrypt", lprc=0x119e8ec) returned 13 [0103.195] DrawTextExW (in: hdc=0x4d010882, lpchText="Decrypt", cchText=7, lprc=0x119ea3c, format=0x102015, lpdtp=0x2ef7bf0 | out: lpchText="Decrypt", lprc=0x119ea3c) returned 13 [0103.196] RestoreDC (hdc=0x4d010882, nSavedDC=-1) returned 1 [0103.196] GdipReleaseDC (graphics=0x5608768, hdc=0x4d010882) returned 0x0 [0103.196] GetFocus () returned 0x102d4 [0103.196] GetFocus () returned 0x102d4 [0103.196] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb40) returned 0x0 [0103.196] GdipDrawRectangleI (graphics=0x5608768, pen=0x5603418, x=0, y=0, width=710, height=35) returned 0x0 [0103.196] GdipDeletePen (pen=0x5603418) returned 0x0 [0103.196] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb20) returned 0x0 [0103.196] GdipDrawRectangleI (graphics=0x5608768, pen=0x5603418, x=1, y=1, width=708, height=33) returned 0x0 [0103.196] GdipDeletePen (pen=0x5603418) returned 0x0 [0103.196] GdipGetDC (graphics=0x5608768, hdc=0x119ed68) returned 0x0 [0103.196] BitBlt (hdc=0x470108fd, x=0, y=0, cx=711, cy=36, hdcSrc=0x4d010882, x1=0, y1=0, rop=0xcc0020) returned 1 [0103.197] GdipReleaseDC (graphics=0x5608768, hdc=0x4d010882) returned 0x0 [0103.197] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0103.197] SelectObject (hdc=0x4d010882, h=0x185000f) returned 0x270508f4 [0103.197] DeleteDC (hdc=0x4d010882) returned 1 [0103.197] GdipDeleteGraphics (graphics=0x5608768) returned 0x0 [0103.197] DeleteObject (ho=0x270508f4) returned 1 [0103.198] EndPaint (hWnd=0x102d4, lpPaint=0x119ed0c) returned 1 [0103.198] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.198] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.198] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.198] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.198] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.198] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x28, lParam=0x0) returned 0x27 [0103.198] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x28, lParam=0x0) returned 0x27 [0103.199] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.199] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.199] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.199] WaitMessage () returned 1 [0103.208] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.208] IsWindowUnicode (hWnd=0x102d6) returned 1 [0103.208] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.209] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.209] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.209] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.209] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.209] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.209] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.209] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.209] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x29, lParam=0x0) returned 0x28 [0103.209] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x29, lParam=0x0) returned 0x28 [0103.209] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.209] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.209] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.209] WaitMessage () returned 1 [0103.224] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.224] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.224] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.224] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.224] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.224] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x2a, lParam=0x0) returned 0x29 [0103.224] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x2a, lParam=0x0) returned 0x29 [0103.224] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.224] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.224] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.224] WaitMessage () returned 1 [0103.240] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.240] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.240] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.240] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.240] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.240] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x2b, lParam=0x0) returned 0x2a [0103.240] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x2b, lParam=0x0) returned 0x2a [0103.240] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.240] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.240] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.240] WaitMessage () returned 1 [0103.256] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.256] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.256] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.256] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.256] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.256] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x2c, lParam=0x0) returned 0x2b [0103.256] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x2c, lParam=0x0) returned 0x2b [0103.256] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.256] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.256] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.256] WaitMessage () returned 1 [0103.271] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.271] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.271] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.271] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.271] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.272] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x2d, lParam=0x0) returned 0x2c [0103.272] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x2d, lParam=0x0) returned 0x2c [0103.272] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.272] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.272] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.272] WaitMessage () returned 1 [0103.289] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.289] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.289] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.290] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.290] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.290] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x2e, lParam=0x0) returned 0x2d [0103.290] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x2e, lParam=0x0) returned 0x2d [0103.290] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.290] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.290] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.290] WaitMessage () returned 1 [0103.303] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.303] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.303] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.304] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.304] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.304] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x2f, lParam=0x0) returned 0x2e [0103.304] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x2f, lParam=0x0) returned 0x2e [0103.304] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.304] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.304] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.304] WaitMessage () returned 1 [0103.318] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.318] IsWindowUnicode (hWnd=0x102d6) returned 1 [0103.318] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.319] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.319] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.319] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.319] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.319] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.319] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.319] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.319] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x30, lParam=0x0) returned 0x2f [0103.319] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x30, lParam=0x0) returned 0x2f [0103.319] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.320] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.320] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.320] WaitMessage () returned 1 [0103.335] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.335] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.336] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.336] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.336] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.336] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x31, lParam=0x0) returned 0x30 [0103.336] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x31, lParam=0x0) returned 0x30 [0103.336] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.336] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.336] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.336] WaitMessage () returned 1 [0103.355] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.355] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.355] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.355] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.355] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.355] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x32, lParam=0x0) returned 0x31 [0103.355] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x32, lParam=0x0) returned 0x31 [0103.355] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.355] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.355] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.355] WaitMessage () returned 1 [0103.365] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.365] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.365] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.365] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.365] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.365] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x33, lParam=0x0) returned 0x32 [0103.365] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x33, lParam=0x0) returned 0x32 [0103.365] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.365] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.365] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.365] WaitMessage () returned 1 [0103.380] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.381] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.381] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.381] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.381] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.381] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x34, lParam=0x0) returned 0x33 [0103.381] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x34, lParam=0x0) returned 0x33 [0103.381] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.381] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.381] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.381] WaitMessage () returned 1 [0103.395] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.396] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.396] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.396] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.396] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.396] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x34 [0103.396] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x34 [0103.396] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.396] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.396] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.396] WaitMessage () returned 1 [0103.411] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.411] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.411] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.411] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.411] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.411] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x36, lParam=0x0) returned 0x35 [0103.411] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x36, lParam=0x0) returned 0x35 [0103.411] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.411] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.411] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.411] WaitMessage () returned 1 [0103.427] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.427] IsWindowUnicode (hWnd=0x102d6) returned 1 [0103.427] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.427] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.427] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.427] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.427] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.427] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.427] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.427] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.427] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x37, lParam=0x0) returned 0x36 [0103.427] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x37, lParam=0x0) returned 0x36 [0103.427] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.427] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.427] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.427] WaitMessage () returned 1 [0103.442] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.443] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.443] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.443] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.443] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.443] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x38, lParam=0x0) returned 0x37 [0103.443] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x38, lParam=0x0) returned 0x37 [0103.443] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.443] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.443] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.443] WaitMessage () returned 1 [0103.458] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.458] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.458] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.458] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.458] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.458] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x39, lParam=0x0) returned 0x38 [0103.458] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x39, lParam=0x0) returned 0x38 [0103.458] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.459] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.459] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.459] WaitMessage () returned 1 [0103.474] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.474] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.474] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.474] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.474] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.474] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x3a, lParam=0x0) returned 0x39 [0103.474] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x3a, lParam=0x0) returned 0x39 [0103.474] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.474] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.474] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.474] WaitMessage () returned 1 [0103.489] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.489] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.489] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.489] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.489] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.489] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x3b, lParam=0x0) returned 0x3a [0103.489] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x3b, lParam=0x0) returned 0x3a [0103.489] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.489] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.489] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.490] WaitMessage () returned 1 [0103.505] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.505] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.505] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.505] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.505] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.505] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x3c, lParam=0x0) returned 0x3b [0103.505] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x3c, lParam=0x0) returned 0x3b [0103.505] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.505] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.505] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.505] WaitMessage () returned 1 [0103.523] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.523] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.523] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.524] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.524] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.524] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x3d, lParam=0x0) returned 0x3c [0103.524] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x3d, lParam=0x0) returned 0x3c [0103.524] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.524] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.524] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.524] WaitMessage () returned 1 [0103.538] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.538] IsWindowUnicode (hWnd=0x102d6) returned 1 [0103.538] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.538] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.538] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.538] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.538] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.538] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.539] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.539] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.539] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x3e, lParam=0x0) returned 0x3d [0103.539] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x3e, lParam=0x0) returned 0x3d [0103.539] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.539] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.539] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.539] WaitMessage () returned 1 [0103.554] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.554] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.554] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.554] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.554] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.554] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x3f, lParam=0x0) returned 0x3e [0103.554] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x3f, lParam=0x0) returned 0x3e [0103.554] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.555] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.555] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.555] WaitMessage () returned 1 [0103.569] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.569] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.569] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.570] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.570] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.570] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x40, lParam=0x0) returned 0x3f [0103.570] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x40, lParam=0x0) returned 0x3f [0103.570] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.570] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.570] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.570] WaitMessage () returned 1 [0103.584] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.584] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.585] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.585] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.585] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.585] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x41, lParam=0x0) returned 0x40 [0103.585] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x41, lParam=0x0) returned 0x40 [0103.585] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.585] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.586] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.586] WaitMessage () returned 1 [0103.599] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.599] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.599] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.600] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.600] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.600] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x42, lParam=0x0) returned 0x41 [0103.600] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x42, lParam=0x0) returned 0x41 [0103.600] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.600] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.600] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.600] WaitMessage () returned 1 [0103.616] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.616] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.616] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.617] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.617] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.617] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x43, lParam=0x0) returned 0x42 [0103.617] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x43, lParam=0x0) returned 0x42 [0103.617] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.617] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.617] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.618] WaitMessage () returned 1 [0103.646] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.646] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.646] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.646] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.646] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.646] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x44, lParam=0x0) returned 0x43 [0103.646] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x44, lParam=0x0) returned 0x43 [0103.647] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.647] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.647] IsWindowUnicode (hWnd=0x102d6) returned 1 [0103.647] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.647] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.647] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.648] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.648] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.648] WaitMessage () returned 1 [0103.663] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.663] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.663] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.663] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.663] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.663] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x45, lParam=0x0) returned 0x44 [0103.663] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x45, lParam=0x0) returned 0x44 [0103.663] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.664] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.664] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.664] WaitMessage () returned 1 [0103.677] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.677] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.677] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.678] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.678] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.678] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x46, lParam=0x0) returned 0x45 [0103.678] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x46, lParam=0x0) returned 0x45 [0103.678] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.678] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.678] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.679] WaitMessage () returned 1 [0103.693] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.693] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.693] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.693] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.693] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.693] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x47, lParam=0x0) returned 0x46 [0103.694] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x47, lParam=0x0) returned 0x46 [0103.694] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.694] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.694] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.694] WaitMessage () returned 1 [0103.709] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.710] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.710] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.710] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.710] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.710] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x48, lParam=0x0) returned 0x47 [0103.710] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x48, lParam=0x0) returned 0x47 [0103.710] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.711] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.711] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.711] WaitMessage () returned 1 [0103.748] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.748] IsWindowUnicode (hWnd=0x102d6) returned 1 [0103.748] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.748] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.748] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.748] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.748] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.748] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.748] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.748] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.748] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x49, lParam=0x0) returned 0x48 [0103.748] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x49, lParam=0x0) returned 0x48 [0103.749] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.749] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.749] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.749] WaitMessage () returned 1 [0103.771] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.771] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.771] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.772] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.772] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.772] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x4a, lParam=0x0) returned 0x49 [0103.772] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x4a, lParam=0x0) returned 0x49 [0103.772] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.772] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.772] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.772] WaitMessage () returned 1 [0103.788] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.788] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.788] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.788] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.788] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.788] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x4b, lParam=0x0) returned 0x4a [0103.788] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x4b, lParam=0x0) returned 0x4a [0103.788] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.789] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.789] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.789] WaitMessage () returned 1 [0103.804] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.804] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.804] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.804] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.804] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.804] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x4c, lParam=0x0) returned 0x4b [0103.804] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x4c, lParam=0x0) returned 0x4b [0103.804] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.805] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.805] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.805] WaitMessage () returned 1 [0103.819] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.820] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.820] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.820] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.820] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.820] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x4d, lParam=0x0) returned 0x4c [0103.820] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x4d, lParam=0x0) returned 0x4c [0103.820] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.821] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.821] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.821] WaitMessage () returned 1 [0103.836] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.836] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.836] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.836] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.836] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.836] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x4e, lParam=0x0) returned 0x4d [0103.836] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x4e, lParam=0x0) returned 0x4d [0103.837] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.837] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.837] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.837] WaitMessage () returned 1 [0103.850] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.850] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.850] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.850] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.850] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.850] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x4f, lParam=0x0) returned 0x4e [0103.850] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x4f, lParam=0x0) returned 0x4e [0103.850] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.851] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.851] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.851] WaitMessage () returned 1 [0103.865] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.865] IsWindowUnicode (hWnd=0x102d6) returned 1 [0103.865] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.865] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.865] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.866] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.866] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.866] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.866] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.866] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.866] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x50, lParam=0x0) returned 0x4f [0103.866] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x50, lParam=0x0) returned 0x4f [0103.866] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.867] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.867] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.867] WaitMessage () returned 1 [0103.882] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.882] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.882] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.882] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.882] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.882] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x51, lParam=0x0) returned 0x50 [0103.882] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x51, lParam=0x0) returned 0x50 [0103.882] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.883] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.883] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.883] WaitMessage () returned 1 [0103.897] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.897] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.897] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.897] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.897] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.897] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x52, lParam=0x0) returned 0x51 [0103.897] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x52, lParam=0x0) returned 0x51 [0103.898] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.898] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.898] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.898] WaitMessage () returned 1 [0103.912] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.912] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.912] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.912] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.912] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.912] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x53, lParam=0x0) returned 0x52 [0103.912] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x53, lParam=0x0) returned 0x52 [0103.912] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.913] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.913] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.913] WaitMessage () returned 1 [0103.928] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.928] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.928] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.929] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.929] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.929] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x54, lParam=0x0) returned 0x53 [0103.929] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x54, lParam=0x0) returned 0x53 [0103.929] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.929] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.929] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.929] WaitMessage () returned 1 [0103.943] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.944] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.944] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.944] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.944] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.944] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x55, lParam=0x0) returned 0x54 [0103.944] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x55, lParam=0x0) returned 0x54 [0103.944] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.945] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.945] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.945] WaitMessage () returned 1 [0103.960] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.960] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.960] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.961] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.961] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.961] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x56, lParam=0x0) returned 0x55 [0103.961] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x56, lParam=0x0) returned 0x55 [0103.961] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.961] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.961] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.961] WaitMessage () returned 1 [0103.976] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.976] IsWindowUnicode (hWnd=0x102d6) returned 1 [0103.976] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.976] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.976] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.976] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.976] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.976] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.977] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.977] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.977] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x57, lParam=0x0) returned 0x56 [0103.977] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x57, lParam=0x0) returned 0x56 [0103.977] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.977] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.977] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.977] WaitMessage () returned 1 [0103.991] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.991] IsWindowUnicode (hWnd=0x40256) returned 1 [0103.991] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0103.991] TranslateMessage (lpMsg=0x119f22c) returned 0 [0103.991] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0103.991] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x58, lParam=0x0) returned 0x57 [0103.991] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x58, lParam=0x0) returned 0x57 [0103.991] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0103.992] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.992] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0103.992] WaitMessage () returned 1 [0104.006] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.006] IsWindowUnicode (hWnd=0x40256) returned 1 [0104.006] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.006] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.006] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.006] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x59, lParam=0x0) returned 0x58 [0104.007] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x59, lParam=0x0) returned 0x58 [0104.007] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0104.007] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.007] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.007] WaitMessage () returned 1 [0104.022] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.022] IsWindowUnicode (hWnd=0x40256) returned 1 [0104.022] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.022] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.022] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.022] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x5a, lParam=0x0) returned 0x59 [0104.023] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x5a, lParam=0x0) returned 0x59 [0104.023] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0104.023] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.023] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.023] WaitMessage () returned 1 [0104.038] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.038] IsWindowUnicode (hWnd=0x40256) returned 1 [0104.038] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.038] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.038] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.039] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x5b, lParam=0x0) returned 0x5a [0104.039] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x5b, lParam=0x0) returned 0x5a [0104.039] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0104.039] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.039] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.039] WaitMessage () returned 1 [0104.054] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.054] IsWindowUnicode (hWnd=0x40256) returned 1 [0104.054] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.054] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.054] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.054] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x5c, lParam=0x0) returned 0x5b [0104.054] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x5c, lParam=0x0) returned 0x5b [0104.054] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0104.055] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.055] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.055] WaitMessage () returned 1 [0104.070] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.070] IsWindowUnicode (hWnd=0x40256) returned 1 [0104.070] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.070] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.070] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.070] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x5d, lParam=0x0) returned 0x5c [0104.070] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x5d, lParam=0x0) returned 0x5c [0104.070] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0104.071] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.071] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.071] WaitMessage () returned 1 [0104.084] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.085] IsWindowUnicode (hWnd=0x102d6) returned 1 [0104.085] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.085] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.085] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.085] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.085] IsWindowUnicode (hWnd=0x40256) returned 1 [0104.085] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.085] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.085] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.086] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x5e, lParam=0x0) returned 0x5d [0104.086] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x5e, lParam=0x0) returned 0x5d [0104.086] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0104.086] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.086] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.086] WaitMessage () returned 1 [0104.100] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.101] IsWindowUnicode (hWnd=0x40256) returned 1 [0104.101] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.101] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.101] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.101] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x5f, lParam=0x0) returned 0x5e [0104.101] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x5f, lParam=0x0) returned 0x5e [0104.101] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0104.102] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.102] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.102] WaitMessage () returned 1 [0104.116] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.116] IsWindowUnicode (hWnd=0x40256) returned 1 [0104.116] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.116] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.116] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.116] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x60, lParam=0x0) returned 0x5f [0104.116] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x60, lParam=0x0) returned 0x5f [0104.116] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0104.117] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.117] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.117] WaitMessage () returned 1 [0104.131] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.131] IsWindowUnicode (hWnd=0x40256) returned 1 [0104.131] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.131] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.131] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.131] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x60 [0104.131] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x60 [0104.132] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0104.132] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.132] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.132] WaitMessage () returned 1 [0104.147] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.147] IsWindowUnicode (hWnd=0x40256) returned 1 [0104.147] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.148] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.148] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.148] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x61 [0104.148] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x61 [0104.148] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0104.148] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.148] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.149] WaitMessage () returned 1 [0104.164] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.164] IsWindowUnicode (hWnd=0x40256) returned 1 [0104.164] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.164] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.164] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.165] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x62 [0104.165] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x62 [0104.165] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0104.165] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.165] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.165] WaitMessage () returned 1 [0104.178] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.178] IsWindowUnicode (hWnd=0x40256) returned 1 [0104.178] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.178] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.178] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.178] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x63 [0104.178] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x63 [0104.178] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0104.179] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.179] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0104.179] WaitMessage () returned 1 [0104.193] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.193] IsWindowUnicode (hWnd=0x102d6) returned 1 [0104.193] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.193] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.193] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.194] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.194] IsWindowUnicode (hWnd=0x40256) returned 1 [0104.194] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0104.194] TranslateMessage (lpMsg=0x119f22c) returned 0 [0104.194] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0104.194] SendMessageW (hWnd=0x102d2, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0104.194] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0104.194] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0104.194] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x14, wParam=0x50108bd, lParam=0x0) returned 0x1 [0104.195] GetWindowThreadProcessId (in: hWnd=0x40256, lpdwProcessId=0x119ef4c | out: lpdwProcessId=0x119ef4c) returned 0x9e4 [0104.195] GetCurrentThreadId () returned 0x9e4 [0104.195] IsWindow (hWnd=0x40256) returned 1 [0104.196] KillTimer (hWnd=0x40256, uIDEvent=0x2) returned 1 [0104.196] DestroyWindow (hWnd=0x40256) returned 1 [0104.196] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x40256, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0104.197] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x40256, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0104.197] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x40256, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0104.216] CoTaskMemAlloc (cb=0x20c) returned 0x160ebc8 [0104.216] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x160ebc8 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Documents") returned 0x0 [0104.218] CoTaskMemFree (pv=0x160ebc8) [0104.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.258] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.258] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7a70 [0104.259] FindNextFileW (in: hFindFile=0x15f7a70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.259] FindClose (in: hFindFile=0x15f7a70 | out: hFindFile=0x15f7a70) returned 1 [0104.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.260] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7eb0 [0104.260] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.260] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.260] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.261] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.261] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.261] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.261] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.261] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.261] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.261] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.261] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.261] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.261] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.261] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.261] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.261] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.262] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.262] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.262] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.262] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.262] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.262] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.262] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.262] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.262] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.262] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.262] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.263] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.263] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.263] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.263] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.263] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.263] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.264] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.265] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f78f0 [0104.265] FindNextFileW (in: hFindFile=0x15f78f0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.265] FindClose (in: hFindFile=0x15f78f0 | out: hFindFile=0x15f78f0) returned 1 [0104.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.265] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f79f0 [0104.265] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.265] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.265] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.265] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.267] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.267] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.267] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.267] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.267] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.267] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.267] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.267] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.267] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.267] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.267] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.268] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.268] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.268] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.268] FindNextFileW (in: hFindFile=0x15f79f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.268] FindClose (in: hFindFile=0x15f79f0 | out: hFindFile=0x15f79f0) returned 1 [0104.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.269] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.269] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7b70 [0104.269] FindNextFileW (in: hFindFile=0x15f7b70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.269] FindClose (in: hFindFile=0x15f7b70 | out: hFindFile=0x15f7b70) returned 1 [0104.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.269] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7eb0 [0104.269] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.270] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.270] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.270] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.270] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.270] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.270] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.270] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.270] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.270] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.270] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.270] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.270] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.271] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.271] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.271] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.271] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.271] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.271] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.271] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.271] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.271] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.271] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.271] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.272] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.272] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.272] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.272] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.272] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.272] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.272] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.272] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.272] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.272] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.272] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.272] GetSystemMetrics (nIndex=42) returned 0 [0104.272] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.272] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", lpFilePart=0x0) returned 0x30 [0104.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.284] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\-spm6vjb.odt.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2b8 [0104.285] GetFileType (hFile=0x2b8) returned 0x1 [0104.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.285] GetFileType (hFile=0x2b8) returned 0x1 [0104.285] GetFileSize (in: hFile=0x2b8, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0xf9d0 [0104.285] ReadFile (in: hFile=0x2b8, lpBuffer=0x2f0abe4, nNumberOfBytesToRead=0xf9d0, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x2f0abe4*, lpNumberOfBytesRead=0x119eec0*=0xf9d0, lpOverlapped=0x0) returned 1 [0104.286] CloseHandle (hObject=0x2b8) returned 1 [0104.364] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x119eef4 | out: pfEnabled=0x119eef4) returned 0x0 [0104.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt", lpFilePart=0x0) returned 0x2b [0104.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.368] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\-spm6vjb.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.369] GetFileType (hFile=0x2d8) returned 0x1 [0104.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.369] GetFileType (hFile=0x2d8) returned 0x1 [0104.369] WriteFile (in: hFile=0x2d8, lpBuffer=0x2f30e80*, nNumberOfBytesToWrite=0xf9c2, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x2f30e80*, lpNumberOfBytesWritten=0x119eeb0*=0xf9c2, lpOverlapped=0x0) returned 1 [0104.370] CloseHandle (hObject=0x2d8) returned 1 [0104.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b898aa1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b898aa1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b898aa1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b898aa1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.372] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.372] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7eb0 [0104.372] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.372] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.373] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7bb0 [0104.373] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.373] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.373] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.373] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.373] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.373] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.373] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.373] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.373] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.373] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.373] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.374] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.374] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.374] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.374] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.374] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.374] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.374] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.374] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.374] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.374] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.374] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.374] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.375] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.375] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.375] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.375] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.375] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.375] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.375] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.375] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.375] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.375] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.375] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0104.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", lpFilePart=0x0) returned 0x30 [0104.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", lpFilePart=0x0) returned 0x30 [0104.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", lpFilePart=0x0) returned 0x30 [0104.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", lpFilePart=0x0) returned 0x30 [0104.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\-spm6vjb.odt.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff75fb8, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x6ff75fb8, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ff7f15e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0xf9d0)) returned 1 [0104.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", lpFilePart=0x0) returned 0x30 [0104.376] GetFullPathNameW (in: lpFileName="-sPM6vJb.odt.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\-sPM6vJb.odt.Lime", lpFilePart=0x0) returned 0x2e [0104.376] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7c70 [0104.377] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.377] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", lpFilePart=0x0) returned 0x30 [0104.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", lpFilePart=0x0) returned 0x30 [0104.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", lpFilePart=0x0) returned 0x30 [0104.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\-spm6vjb.odt.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff75fb8, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x6ff75fb8, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ff7f15e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0xf9d0)) returned 1 [0104.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime", lpFilePart=0x0) returned 0x30 [0104.378] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\-sPM6vJb.odt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\-spm6vjb.odt.lime")) returned 1 [0104.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b898aa1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b898aa1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b898aa1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b898aa1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.380] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.380] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7bb0 [0104.380] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.380] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0104.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.380] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7bb0 [0104.380] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.380] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.380] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.380] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.381] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.381] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.381] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.381] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.381] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.381] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.381] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.381] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.381] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.381] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.381] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.381] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.382] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.382] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.382] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.382] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.382] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.382] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.382] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.382] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.382] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.382] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.382] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.382] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.383] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.383] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.383] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.383] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.383] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0104.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b898aa1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b898aa1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b898aa1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b898aa1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.384] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.384] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7bb0 [0104.384] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.384] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0104.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.384] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7bb0 [0104.384] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.384] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.385] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.385] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.385] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.385] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.385] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.385] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.385] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.385] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.385] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.385] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.385] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.386] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.386] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.386] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.386] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.386] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.386] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.386] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.386] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.386] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.386] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.386] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.387] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.387] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.387] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.387] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.387] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.387] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.387] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.387] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.387] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0104.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.387] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.387] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.387] GetSystemMetrics (nIndex=42) returned 0 [0104.387] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.387] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", lpFilePart=0x0) returned 0x2e [0104.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.388] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\0u2ya.docx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.388] GetFileType (hFile=0x2d8) returned 0x1 [0104.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.388] GetFileType (hFile=0x2d8) returned 0x1 [0104.388] GetFileSize (in: hFile=0x2d8, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x2ec0 [0104.388] ReadFile (in: hFile=0x2d8, lpBuffer=0x2f53a8c, nNumberOfBytesToRead=0x2ec0, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x2f53a8c*, lpNumberOfBytesRead=0x119eec0*=0x2ec0, lpOverlapped=0x0) returned 1 [0104.389] CloseHandle (hObject=0x2d8) returned 1 [0104.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx", lpFilePart=0x0) returned 0x29 [0104.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.390] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\0u2ya.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.390] GetFileType (hFile=0x2d8) returned 0x1 [0104.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.390] GetFileType (hFile=0x2d8) returned 0x1 [0104.390] WriteFile (in: hFile=0x2d8, lpBuffer=0x2f5a064*, nNumberOfBytesToWrite=0x2eb6, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x2f5a064*, lpNumberOfBytesWritten=0x119eeb0*=0x2eb6, lpOverlapped=0x0) returned 1 [0104.390] CloseHandle (hObject=0x2d8) returned 1 [0104.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b8bed58, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b8bed58, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b8bed58, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b8bed58, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.392] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.392] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7df0 [0104.392] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.392] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.392] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7d30 [0104.392] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.392] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.392] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.393] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.393] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.393] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.393] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.393] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.393] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.393] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.393] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.393] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.393] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.393] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.393] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.393] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.394] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.394] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.394] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.394] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.394] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.394] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.394] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.394] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.394] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.394] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.394] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.394] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.395] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.395] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.395] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.395] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.395] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.395] FindClose (in: hFindFile=0x15f7d30 | out: hFindFile=0x15f7d30) returned 1 [0104.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", lpFilePart=0x0) returned 0x2e [0104.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", lpFilePart=0x0) returned 0x2e [0104.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", lpFilePart=0x0) returned 0x2e [0104.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", lpFilePart=0x0) returned 0x2e [0104.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\0u2ya.docx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff8abd0, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x6ff8abd0, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ffb0f92, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2ec0)) returned 1 [0104.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", lpFilePart=0x0) returned 0x2e [0104.395] GetFullPathNameW (in: lpFileName="0u2YA.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\0u2YA.docx.Lime", lpFilePart=0x0) returned 0x2c [0104.396] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7f30 [0104.396] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.396] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0104.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", lpFilePart=0x0) returned 0x2e [0104.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", lpFilePart=0x0) returned 0x2e [0104.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", lpFilePart=0x0) returned 0x2e [0104.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\0u2ya.docx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff8abd0, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x6ff8abd0, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ffb0f92, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x2ec0)) returned 1 [0104.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime", lpFilePart=0x0) returned 0x2e [0104.396] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\0u2YA.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\0u2ya.docx.lime")) returned 1 [0104.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b8e4f7b, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b8e4f7b, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b8e4f7b, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b8e4f7b, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.397] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.397] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7d30 [0104.397] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.397] FindClose (in: hFindFile=0x15f7d30 | out: hFindFile=0x15f7d30) returned 1 [0104.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.398] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7bf0 [0104.398] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.398] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.398] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.398] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.398] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.398] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.398] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.398] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.398] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.398] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.399] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.399] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.399] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.399] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.399] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.399] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.399] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.399] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.399] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.399] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.399] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.399] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.400] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.400] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.400] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.400] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.400] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.400] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.400] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.400] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.400] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.400] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.400] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0104.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b8e4f7b, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b8e4f7b, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b8e4f7b, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b8e4f7b, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.401] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.401] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7bf0 [0104.401] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.401] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0104.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.401] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7bf0 [0104.402] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.402] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.402] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.402] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.402] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.402] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.402] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.402] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.402] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.402] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.402] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.402] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.402] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.403] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.403] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.403] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.403] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.403] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.403] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.403] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.403] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.403] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.403] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.403] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.403] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.404] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.404] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.404] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.404] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.404] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.404] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.404] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.404] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0104.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.404] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.404] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.404] GetSystemMetrics (nIndex=42) returned 0 [0104.404] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.404] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", lpFilePart=0x0) returned 0x37 [0104.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.404] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\7wwg1y1tq2o4xif.pdf.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.404] GetFileType (hFile=0x2d8) returned 0x1 [0104.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.405] GetFileType (hFile=0x2d8) returned 0x1 [0104.405] GetFileSize (in: hFile=0x2d8, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x550 [0104.405] ReadFile (in: hFile=0x2d8, lpBuffer=0x2f7057c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x2f7057c*, lpNumberOfBytesRead=0x119eec0*=0x550, lpOverlapped=0x0) returned 1 [0104.405] CloseHandle (hObject=0x2d8) returned 1 [0104.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf", lpFilePart=0x0) returned 0x32 [0104.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.406] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf" (normalized: "c:\\users\\5jghkoaofdp\\documents\\7wwg1y1tq2o4xif.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.406] GetFileType (hFile=0x2d8) returned 0x1 [0104.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.406] GetFileType (hFile=0x2d8) returned 0x1 [0104.406] WriteFile (in: hFile=0x2d8, lpBuffer=0x2f729b8*, nNumberOfBytesToWrite=0x54f, lpNumberOfBytesWritten=0x119ee84, lpOverlapped=0x0 | out: lpBuffer=0x2f729b8*, lpNumberOfBytesWritten=0x119ee84*=0x54f, lpOverlapped=0x0) returned 1 [0104.407] CloseHandle (hObject=0x2d8) returned 1 [0104.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b8e4f7b, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b8e4f7b, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b8e4f7b, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b8e4f7b, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.408] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.408] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7c30 [0104.408] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.408] FindClose (in: hFindFile=0x15f7c30 | out: hFindFile=0x15f7c30) returned 1 [0104.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.409] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7c30 [0104.409] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.409] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.409] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.409] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.409] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.409] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.409] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.409] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.409] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.409] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.409] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.410] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.410] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.410] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.410] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.410] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.410] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.410] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.410] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.410] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.410] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.410] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.411] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.411] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.411] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.411] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.411] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.411] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.411] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.411] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.411] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.411] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.412] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.412] FindClose (in: hFindFile=0x15f7c30 | out: hFindFile=0x15f7c30) returned 1 [0104.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", lpFilePart=0x0) returned 0x37 [0104.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", lpFilePart=0x0) returned 0x37 [0104.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", lpFilePart=0x0) returned 0x37 [0104.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", lpFilePart=0x0) returned 0x37 [0104.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\7wwg1y1tq2o4xif.pdf.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffd721e, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x6ffd721e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ffd721e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0104.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", lpFilePart=0x0) returned 0x37 [0104.412] GetFullPathNameW (in: lpFileName="7wwG1Y1tq2o4XiF.pdf.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\7wwG1Y1tq2o4XiF.pdf.Lime", lpFilePart=0x0) returned 0x35 [0104.412] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7c30 [0104.412] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.412] FindClose (in: hFindFile=0x15f7c30 | out: hFindFile=0x15f7c30) returned 1 [0104.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", lpFilePart=0x0) returned 0x37 [0104.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", lpFilePart=0x0) returned 0x37 [0104.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", lpFilePart=0x0) returned 0x37 [0104.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\7wwg1y1tq2o4xif.pdf.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffd721e, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x6ffd721e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6ffd721e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0104.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime", lpFilePart=0x0) returned 0x37 [0104.413] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\7wwG1Y1tq2o4XiF.pdf.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\7wwg1y1tq2o4xif.pdf.lime")) returned 1 [0104.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b90b23e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b90b23e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b90b23e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b90b23e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.414] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.414] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7c30 [0104.414] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.414] FindClose (in: hFindFile=0x15f7c30 | out: hFindFile=0x15f7c30) returned 1 [0104.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.414] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7830 [0104.415] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.415] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.415] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.415] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.415] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.415] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.415] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.415] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.415] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.415] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.415] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.415] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.416] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.416] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.416] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.416] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.416] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.416] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.416] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.416] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.416] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.416] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.416] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.416] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.417] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.417] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.417] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.417] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.417] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.417] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.417] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.417] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.417] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b90b23e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b90b23e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b90b23e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b90b23e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.418] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.418] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7df0 [0104.418] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.418] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.418] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7c30 [0104.418] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.419] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.419] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.419] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.419] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.419] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.419] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.419] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.419] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.419] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.419] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.419] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.419] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.420] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.420] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.420] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.420] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.420] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.420] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.420] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.420] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.420] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.420] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.420] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.421] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.421] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.421] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.421] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.421] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.421] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.421] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.421] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.421] FindClose (in: hFindFile=0x15f7c30 | out: hFindFile=0x15f7c30) returned 1 [0104.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.421] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.421] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.421] GetSystemMetrics (nIndex=42) returned 0 [0104.421] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.421] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", lpFilePart=0x0) returned 0x35 [0104.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.421] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\9tmo3uu8-scl.xlsx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.422] GetFileType (hFile=0x2d8) returned 0x1 [0104.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.422] GetFileType (hFile=0x2d8) returned 0x1 [0104.422] GetFileSize (in: hFile=0x2d8, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x170d0 [0104.422] ReadFile (in: hFile=0x2d8, lpBuffer=0x40421e0, nNumberOfBytesToRead=0x170d0, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x40421e0*, lpNumberOfBytesRead=0x119eec0*=0x170d0, lpOverlapped=0x0) returned 1 [0104.423] CloseHandle (hObject=0x2d8) returned 1 [0104.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx", lpFilePart=0x0) returned 0x30 [0104.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.427] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\9tmo3uu8-scl.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.427] GetFileType (hFile=0x2d8) returned 0x1 [0104.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.427] GetFileType (hFile=0x2d8) returned 0x1 [0104.427] WriteFile (in: hFile=0x2d8, lpBuffer=0x40703c0*, nNumberOfBytesToWrite=0x170ce, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x40703c0*, lpNumberOfBytesWritten=0x119eeb0*=0x170ce, lpOverlapped=0x0) returned 1 [0104.428] CloseHandle (hObject=0x2d8) returned 1 [0104.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b931417, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b931417, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b931417, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b931417, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.431] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.431] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7c70 [0104.431] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.431] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.431] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7f30 [0104.431] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.431] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.432] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.432] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.432] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.432] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.432] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.432] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.432] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.432] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.432] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.432] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.432] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.432] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.432] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.434] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0104.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", lpFilePart=0x0) returned 0x35 [0104.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", lpFilePart=0x0) returned 0x35 [0104.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", lpFilePart=0x0) returned 0x35 [0104.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", lpFilePart=0x0) returned 0x35 [0104.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\9tmo3uu8-scl.xlsx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fffd44c, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x6fffd44c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6fffd44c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x170d0)) returned 1 [0104.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", lpFilePart=0x0) returned 0x35 [0104.434] GetFullPathNameW (in: lpFileName="9TMo3uu8-Scl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\9TMo3uu8-Scl.xlsx.Lime", lpFilePart=0x0) returned 0x33 [0104.434] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7c70 [0104.435] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.435] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", lpFilePart=0x0) returned 0x35 [0104.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", lpFilePart=0x0) returned 0x35 [0104.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", lpFilePart=0x0) returned 0x35 [0104.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\9tmo3uu8-scl.xlsx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fffd44c, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x6fffd44c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x6fffd44c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x170d0)) returned 1 [0104.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime", lpFilePart=0x0) returned 0x35 [0104.435] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\9TMo3uu8-Scl.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\9tmo3uu8-scl.xlsx.lime")) returned 1 [0104.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b931417, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b931417, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b931417, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b931417, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.437] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.437] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7f30 [0104.437] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.437] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0104.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.437] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7f30 [0104.437] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.437] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.437] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.437] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.437] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.439] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.439] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.439] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.439] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.439] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.439] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.439] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.439] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.439] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.440] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.440] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.440] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.440] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.440] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.440] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0104.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b931417, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b931417, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b931417, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b931417, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.441] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.441] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7c70 [0104.441] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.441] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.441] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7c70 [0104.441] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.441] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.441] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.441] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.442] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.442] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.442] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.442] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.442] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.442] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.442] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.442] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.442] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.442] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.442] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.442] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.442] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.443] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.443] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.443] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.443] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.443] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.443] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.443] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.443] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.443] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.443] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.443] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.443] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.444] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.444] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.444] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.444] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.444] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.444] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.444] GetSystemMetrics (nIndex=42) returned 0 [0104.444] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.444] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", lpFilePart=0x0) returned 0x36 [0104.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.444] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\aeghbubms5ntl.pptx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.444] GetFileType (hFile=0x2d8) returned 0x1 [0104.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.444] GetFileType (hFile=0x2d8) returned 0x1 [0104.444] GetFileSize (in: hFile=0x2d8, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x11140 [0104.444] ReadFile (in: hFile=0x2d8, lpBuffer=0x2f9a558, nNumberOfBytesToRead=0x11140, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x2f9a558*, lpNumberOfBytesRead=0x119eec0*=0x11140, lpOverlapped=0x0) returned 1 [0104.445] CloseHandle (hObject=0x2d8) returned 1 [0104.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx", lpFilePart=0x0) returned 0x31 [0104.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.447] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\aeghbubms5ntl.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.447] GetFileType (hFile=0x2d8) returned 0x1 [0104.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.447] GetFileType (hFile=0x2d8) returned 0x1 [0104.447] WriteFile (in: hFile=0x2d8, lpBuffer=0x2fbd040*, nNumberOfBytesToWrite=0x11137, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x2fbd040*, lpNumberOfBytesWritten=0x119eeb0*=0x11137, lpOverlapped=0x0) returned 1 [0104.448] CloseHandle (hObject=0x2d8) returned 1 [0104.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b95766d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b95766d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b95766d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b95766d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.450] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.450] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7c70 [0104.450] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.450] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.451] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7830 [0104.451] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.451] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.451] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.451] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.451] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.451] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.451] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.451] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.452] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.452] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.452] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.452] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.452] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.452] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.452] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.452] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.452] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.452] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.452] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.452] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.453] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.453] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.453] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.453] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.453] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.453] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.453] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.453] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.453] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.453] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.453] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.453] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.454] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.454] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", lpFilePart=0x0) returned 0x36 [0104.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", lpFilePart=0x0) returned 0x36 [0104.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", lpFilePart=0x0) returned 0x36 [0104.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", lpFilePart=0x0) returned 0x36 [0104.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\aeghbubms5ntl.pptx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70049962, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70049962, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70049962, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x11140)) returned 1 [0104.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", lpFilePart=0x0) returned 0x36 [0104.454] GetFullPathNameW (in: lpFileName="AEghbUBMs5NTL.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\AEghbUBMs5NTL.pptx.Lime", lpFilePart=0x0) returned 0x34 [0104.454] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7c70 [0104.454] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.454] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", lpFilePart=0x0) returned 0x36 [0104.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", lpFilePart=0x0) returned 0x36 [0104.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", lpFilePart=0x0) returned 0x36 [0104.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\aeghbubms5ntl.pptx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70049962, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70049962, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70049962, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x11140)) returned 1 [0104.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime", lpFilePart=0x0) returned 0x36 [0104.455] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\AEghbUBMs5NTL.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\aeghbubms5ntl.pptx.lime")) returned 1 [0104.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b95766d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b95766d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b95766d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b95766d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.456] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.456] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7df0 [0104.456] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.456] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.457] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7830 [0104.457] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.457] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.457] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.457] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.457] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.457] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.457] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.457] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.458] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.458] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.458] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.458] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.458] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.458] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.458] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.458] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.458] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.458] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.458] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.460] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.460] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b95766d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b95766d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b95766d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b95766d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.460] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.460] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7c70 [0104.460] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.461] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.461] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7df0 [0104.461] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.461] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.461] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.461] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.461] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.461] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.461] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.461] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.462] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.462] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.462] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.462] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.462] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.462] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.462] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.462] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.462] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.462] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.462] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.462] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.463] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.463] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.463] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.463] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.463] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.463] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.463] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.463] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.463] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.463] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.463] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.463] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.464] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.464] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.464] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.464] GetSystemMetrics (nIndex=42) returned 0 [0104.464] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.464] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.464] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\c94gq1vfwvfbcdgwkd_.docx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.464] GetFileType (hFile=0x2d8) returned 0x1 [0104.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.464] GetFileType (hFile=0x2d8) returned 0x1 [0104.464] GetFileSize (in: hFile=0x2d8, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x15710 [0104.464] ReadFile (in: hFile=0x2d8, lpBuffer=0x40874b0, nNumberOfBytesToRead=0x15710, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x40874b0*, lpNumberOfBytesRead=0x119eec0*=0x15710, lpOverlapped=0x0) returned 1 [0104.465] CloseHandle (hObject=0x2d8) returned 1 [0104.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.469] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\c94gq1vfwvfbcdgwkd_.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.469] GetFileType (hFile=0x2d8) returned 0x1 [0104.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.469] GetFileType (hFile=0x2d8) returned 0x1 [0104.469] WriteFile (in: hFile=0x2d8, lpBuffer=0x40b2310*, nNumberOfBytesToWrite=0x1570d, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x40b2310*, lpNumberOfBytesWritten=0x119eeb0*=0x1570d, lpOverlapped=0x0) returned 1 [0104.470] CloseHandle (hObject=0x2d8) returned 1 [0104.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b97d8f6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b97d8f6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b97d8f6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b97d8f6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.472] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7830 [0104.472] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.472] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.472] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7c70 [0104.473] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.473] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.473] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.473] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.473] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.473] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.473] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.473] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.473] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.473] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.473] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.473] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.474] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.474] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.474] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.474] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.474] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.474] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.474] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.474] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.474] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.474] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.474] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.474] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.475] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.475] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.475] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.475] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.475] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.475] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.475] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.475] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.475] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.475] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\c94gq1vfwvfbcdgwkd_.docx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7006fb69, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7006fb69, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7006fb69, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x15710)) returned 1 [0104.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.476] GetFullPathNameW (in: lpFileName="c94gQ1vFwVFBcDGwkD_.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\c94gQ1vFwVFBcDGwkD_.docx.Lime", lpFilePart=0x0) returned 0x3a [0104.476] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7c70 [0104.476] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.476] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\c94gq1vfwvfbcdgwkd_.docx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7006fb69, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7006fb69, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7006fb69, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x15710)) returned 1 [0104.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.476] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\c94gQ1vFwVFBcDGwkD_.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\c94gq1vfwvfbcdgwkd_.docx.lime")) returned 1 [0104.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9a3b88, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9a3b88, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9a3b88, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9a3b88, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.478] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.478] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7830 [0104.478] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.478] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.478] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7c70 [0104.478] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.478] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.478] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.478] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.478] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.479] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.479] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.479] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.479] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.479] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.479] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.479] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.479] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.479] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.479] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.479] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.479] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.480] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.480] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.480] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.480] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.480] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.480] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.480] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.480] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.480] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.480] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.480] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.480] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.480] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.481] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.481] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.481] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9a3b88, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9a3b88, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9a3b88, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9a3b88, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.481] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.481] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7830 [0104.481] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.481] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.482] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7c70 [0104.482] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.482] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.482] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.482] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.482] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.482] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.482] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.482] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.482] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.483] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.483] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.483] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.483] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.483] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.483] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.483] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.483] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.483] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.483] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.483] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.483] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.484] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.484] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.484] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.484] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.484] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.484] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.484] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.484] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.484] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.484] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.484] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.484] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.484] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.485] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.485] GetSystemMetrics (nIndex=42) returned 0 [0104.485] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.485] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2f [0104.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.485] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\desktop.ini.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.485] GetFileType (hFile=0x2d8) returned 0x1 [0104.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.485] GetFileType (hFile=0x2d8) returned 0x1 [0104.485] GetFileSize (in: hFile=0x2d8, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x1a0 [0104.485] ReadFile (in: hFile=0x2d8, lpBuffer=0x2ff5028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x2ff5028*, lpNumberOfBytesRead=0x119eec0*=0x1a0, lpOverlapped=0x0) returned 1 [0104.485] CloseHandle (hObject=0x2d8) returned 1 [0104.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2a [0104.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.486] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini" (normalized: "c:\\users\\5jghkoaofdp\\documents\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.486] GetFileType (hFile=0x2d8) returned 0x1 [0104.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.486] GetFileType (hFile=0x2d8) returned 0x1 [0104.486] WriteFile (in: hFile=0x2d8, lpBuffer=0x2ff6cc8*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x119ee84, lpOverlapped=0x0 | out: lpBuffer=0x2ff6cc8*, lpNumberOfBytesWritten=0x119ee84*=0x192, lpOverlapped=0x0) returned 1 [0104.487] CloseHandle (hObject=0x2d8) returned 1 [0104.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9a3b88, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9a3b88, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9a3b88, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9a3b88, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.488] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.488] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7df0 [0104.488] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.488] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.488] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7c70 [0104.488] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.489] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.489] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.489] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.489] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.489] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.489] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.489] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.489] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.489] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.489] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.489] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.490] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.490] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.490] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.490] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.490] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.490] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.490] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.490] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.490] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.490] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.490] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.491] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.491] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.491] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.491] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.491] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.491] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.491] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.491] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.491] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.491] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.491] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2f [0104.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2f [0104.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2f [0104.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2f [0104.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\desktop.ini.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70095e0c, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70095e0c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70095e0c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0104.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2f [0104.492] GetFullPathNameW (in: lpFileName="desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2d [0104.492] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7c70 [0104.492] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.492] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2f [0104.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2f [0104.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2f [0104.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\desktop.ini.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70095e0c, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70095e0c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70095e0c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0104.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2f [0104.492] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\desktop.ini.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\desktop.ini.lime")) returned 1 [0104.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9c9dbf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9c9dbf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9c9dbf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9c9dbf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.494] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.494] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7c70 [0104.494] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.494] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.494] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7830 [0104.494] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.494] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.494] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.494] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.494] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.495] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.495] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.495] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.495] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.495] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.495] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.495] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.495] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.495] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.495] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.495] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.495] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.496] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.496] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.496] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.496] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.496] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.496] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.496] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.496] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.496] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.496] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.496] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.496] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.497] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.497] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.497] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.497] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9c9dbf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9c9dbf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9c9dbf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9c9dbf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.497] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.497] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7df0 [0104.498] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.498] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.498] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7c70 [0104.498] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.498] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.498] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.498] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.498] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.498] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.499] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.499] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.499] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.499] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.499] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.499] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.499] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.499] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.499] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.499] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.499] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.499] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.500] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.500] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.500] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.500] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.500] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.500] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.500] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.500] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.500] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.500] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.500] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.500] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.501] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.501] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.501] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.501] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.501] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.501] GetSystemMetrics (nIndex=42) returned 0 [0104.501] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.501] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", lpFilePart=0x0) returned 0x37 [0104.501] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\erhcl a2gbl1at.docx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.501] GetFileType (hFile=0x2d8) returned 0x1 [0104.501] GetFileType (hFile=0x2d8) returned 0x1 [0104.501] GetFileSize (in: hFile=0x2d8, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0xc380 [0104.501] ReadFile (in: hFile=0x2d8, lpBuffer=0x300aab0, nNumberOfBytesToRead=0xc380, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x300aab0*, lpNumberOfBytesRead=0x119eec0*=0xc380, lpOverlapped=0x0) returned 1 [0104.502] CloseHandle (hObject=0x2d8) returned 1 [0104.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx", lpFilePart=0x0) returned 0x32 [0104.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.504] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\erhcl a2gbl1at.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.504] GetFileType (hFile=0x2d8) returned 0x1 [0104.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.504] GetFileType (hFile=0x2d8) returned 0x1 [0104.504] WriteFile (in: hFile=0x2d8, lpBuffer=0x3023a1c*, nNumberOfBytesToWrite=0xc379, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x3023a1c*, lpNumberOfBytesWritten=0x119eeb0*=0xc379, lpOverlapped=0x0) returned 1 [0104.505] CloseHandle (hObject=0x2d8) returned 1 [0104.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9c9dbf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9c9dbf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9c9dbf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9c9dbf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.507] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.507] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7cb0 [0104.507] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.507] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.508] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7cb0 [0104.508] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.508] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.508] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.508] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.508] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.508] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.508] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.508] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.508] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.508] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.508] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.509] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.509] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.509] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.509] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.509] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.509] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.509] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.509] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.509] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.509] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.509] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.510] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.510] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.510] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.510] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.510] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.510] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.510] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.510] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.510] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.510] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.510] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.510] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", lpFilePart=0x0) returned 0x37 [0104.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", lpFilePart=0x0) returned 0x37 [0104.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", lpFilePart=0x0) returned 0x37 [0104.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", lpFilePart=0x0) returned 0x37 [0104.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\erhcl a2gbl1at.docx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700e22ad, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x700e22ad, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700e22ad, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0xc380)) returned 1 [0104.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", lpFilePart=0x0) returned 0x37 [0104.511] GetFullPathNameW (in: lpFileName="erHcl A2gBL1aT.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\erHcl A2gBL1aT.docx.Lime", lpFilePart=0x0) returned 0x35 [0104.511] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7e30 [0104.511] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.511] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", lpFilePart=0x0) returned 0x37 [0104.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", lpFilePart=0x0) returned 0x37 [0104.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", lpFilePart=0x0) returned 0x37 [0104.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\erhcl a2gbl1at.docx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700e22ad, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x700e22ad, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x700e22ad, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0xc380)) returned 1 [0104.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime", lpFilePart=0x0) returned 0x37 [0104.512] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\erHcl A2gBL1aT.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\erhcl a2gbl1at.docx.lime")) returned 1 [0104.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9effdc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9effdc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9effdc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9effdc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.513] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.513] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7cb0 [0104.513] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.513] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.514] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7cb0 [0104.514] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.514] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.514] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.514] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.514] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.514] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.514] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.514] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.514] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.514] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.514] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.515] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.515] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.515] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.515] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.515] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.515] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.515] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.515] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.515] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.515] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.515] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.516] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.516] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.516] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.516] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.516] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.516] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.516] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.516] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.516] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.516] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.516] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9effdc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9effdc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9b9effdc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9b9effdc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.517] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.517] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7830 [0104.517] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.517] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.518] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7cb0 [0104.518] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.518] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.518] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.518] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.518] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.518] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.518] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.518] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.518] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.518] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.518] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.519] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.519] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.519] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.519] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.519] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.519] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.519] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.519] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.519] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.519] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.519] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.520] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.520] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.520] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.520] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.520] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.520] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.520] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.520] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.520] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.520] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.521] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.521] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.521] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.521] GetSystemMetrics (nIndex=42) returned 0 [0104.521] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.521] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", lpFilePart=0x0) returned 0x32 [0104.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.521] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\eyedf199l.xlsx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.521] GetFileType (hFile=0x2d8) returned 0x1 [0104.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.521] GetFileType (hFile=0x2d8) returned 0x1 [0104.521] GetFileSize (in: hFile=0x2d8, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x16990 [0104.521] ReadFile (in: hFile=0x2d8, lpBuffer=0x40c7a40, nNumberOfBytesToRead=0x16990, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x40c7a40*, lpNumberOfBytesRead=0x119eec0*=0x16990, lpOverlapped=0x0) returned 1 [0104.524] CloseHandle (hObject=0x2d8) returned 1 [0104.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx", lpFilePart=0x0) returned 0x2d [0104.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.527] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\eyedf199l.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.528] GetFileType (hFile=0x2d8) returned 0x1 [0104.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.528] GetFileType (hFile=0x2d8) returned 0x1 [0104.528] WriteFile (in: hFile=0x2d8, lpBuffer=0x40f4da0*, nNumberOfBytesToWrite=0x16988, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x40f4da0*, lpNumberOfBytesWritten=0x119eeb0*=0x16988, lpOverlapped=0x0) returned 1 [0104.529] CloseHandle (hObject=0x2d8) returned 1 [0104.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba162c6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba162c6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba162c6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba162c6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.532] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.532] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7cb0 [0104.532] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.532] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.532] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7cb0 [0104.532] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.533] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.533] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.533] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.533] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.533] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.533] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.533] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.533] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.533] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.533] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.533] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.533] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.533] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.534] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.534] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.534] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.534] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.534] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.534] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.534] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.534] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.534] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.534] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.534] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.534] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.535] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.535] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.535] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.535] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.535] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.535] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.535] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.535] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", lpFilePart=0x0) returned 0x32 [0104.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", lpFilePart=0x0) returned 0x32 [0104.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", lpFilePart=0x0) returned 0x32 [0104.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", lpFilePart=0x0) returned 0x32 [0104.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\eyedf199l.xlsx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7010852d, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7010852d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7010852d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x16990)) returned 1 [0104.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", lpFilePart=0x0) returned 0x32 [0104.536] GetFullPathNameW (in: lpFileName="eYeDf199l.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\eYeDf199l.xlsx.Lime", lpFilePart=0x0) returned 0x30 [0104.536] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7cb0 [0104.536] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.536] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", lpFilePart=0x0) returned 0x32 [0104.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", lpFilePart=0x0) returned 0x32 [0104.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", lpFilePart=0x0) returned 0x32 [0104.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\eyedf199l.xlsx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7010852d, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7010852d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7010852d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x16990)) returned 1 [0104.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime", lpFilePart=0x0) returned 0x32 [0104.536] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\eYeDf199l.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\eyedf199l.xlsx.lime")) returned 1 [0104.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba3c4ae, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba3c4ae, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba3c4ae, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba3c4ae, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.538] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.538] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7cb0 [0104.538] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.538] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.539] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7cb0 [0104.539] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.539] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.539] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.539] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.539] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.539] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.539] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.539] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.539] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.539] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.539] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.540] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.540] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.540] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.540] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.540] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.540] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.540] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.540] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.540] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.540] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.540] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.541] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.541] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.541] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.541] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.541] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.541] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.541] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.541] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.541] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.541] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.541] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba3c4ae, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba3c4ae, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba3c4ae, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba3c4ae, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.542] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.542] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7cb0 [0104.542] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.542] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.543] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7cb0 [0104.543] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.543] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.543] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.543] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.543] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.543] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.543] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.543] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.543] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.544] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.544] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.544] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.544] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.544] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.544] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.544] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.544] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.544] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.544] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.544] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.544] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.545] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.545] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.545] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.545] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.545] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.545] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.545] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.545] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.545] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.545] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.545] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.545] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.546] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.546] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.546] GetSystemMetrics (nIndex=42) returned 0 [0104.546] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.546] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", lpFilePart=0x0) returned 0x32 [0104.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.546] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\g 5zx6m5n.docx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.546] GetFileType (hFile=0x2d8) returned 0x1 [0104.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.546] GetFileType (hFile=0x2d8) returned 0x1 [0104.546] GetFileSize (in: hFile=0x2d8, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x3af0 [0104.546] ReadFile (in: hFile=0x2d8, lpBuffer=0x3056530, nNumberOfBytesToRead=0x3af0, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x3056530*, lpNumberOfBytesRead=0x119eec0*=0x3af0, lpOverlapped=0x0) returned 1 [0104.547] CloseHandle (hObject=0x2d8) returned 1 [0104.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx", lpFilePart=0x0) returned 0x2d [0104.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.548] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\g 5zx6m5n.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.548] GetFileType (hFile=0x2d8) returned 0x1 [0104.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.548] GetFileType (hFile=0x2d8) returned 0x1 [0104.548] WriteFile (in: hFile=0x2d8, lpBuffer=0x305e370*, nNumberOfBytesToWrite=0x3aeb, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x305e370*, lpNumberOfBytesWritten=0x119eeb0*=0x3aeb, lpOverlapped=0x0) returned 1 [0104.549] CloseHandle (hObject=0x2d8) returned 1 [0104.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba3c4ae, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba3c4ae, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba3c4ae, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba3c4ae, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.550] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.550] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7df0 [0104.550] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.550] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.551] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7df0 [0104.551] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.551] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.551] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.551] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.551] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.551] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.551] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.551] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.551] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.552] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.552] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.552] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.552] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.552] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.552] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.552] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.552] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.552] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.552] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.552] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.552] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.553] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.553] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.553] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.553] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.553] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.553] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.553] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.553] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.553] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.553] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.553] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.553] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.553] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", lpFilePart=0x0) returned 0x32 [0104.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", lpFilePart=0x0) returned 0x32 [0104.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", lpFilePart=0x0) returned 0x32 [0104.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", lpFilePart=0x0) returned 0x32 [0104.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\g 5zx6m5n.docx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7012e76a, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7012e76a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7012e76a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3af0)) returned 1 [0104.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", lpFilePart=0x0) returned 0x32 [0104.554] GetFullPathNameW (in: lpFileName="G 5ZX6m5N.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\G 5ZX6m5N.docx.Lime", lpFilePart=0x0) returned 0x30 [0104.554] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7df0 [0104.554] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.554] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", lpFilePart=0x0) returned 0x32 [0104.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", lpFilePart=0x0) returned 0x32 [0104.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", lpFilePart=0x0) returned 0x32 [0104.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\g 5zx6m5n.docx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7012e76a, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7012e76a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7012e76a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3af0)) returned 1 [0104.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime", lpFilePart=0x0) returned 0x32 [0104.555] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\G 5ZX6m5N.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\g 5zx6m5n.docx.lime")) returned 1 [0104.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba62748, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba62748, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba62748, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba62748, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.556] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.556] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7df0 [0104.556] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.556] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.556] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7df0 [0104.556] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.557] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.557] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.557] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.557] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.557] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.557] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.557] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.557] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.557] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.557] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.557] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.557] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.557] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.557] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.558] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.558] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.558] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.558] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.558] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.558] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.558] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.558] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.558] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.558] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.558] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.559] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.559] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.559] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.559] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.559] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.559] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.559] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba62748, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba62748, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba62748, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba62748, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.560] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.560] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7df0 [0104.560] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.560] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.560] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7df0 [0104.560] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.560] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.560] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.561] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.561] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.561] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.561] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.561] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.561] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.561] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.561] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.561] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.561] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.561] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.561] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.561] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.562] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.562] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.562] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.562] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.562] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.562] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.562] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.562] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.562] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.562] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.562] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.562] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.563] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.563] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.563] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.563] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.563] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.563] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.563] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.563] GetSystemMetrics (nIndex=42) returned 0 [0104.563] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.563] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.563] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx.Lime", lpFilePart=0x0) returned 0x2d [0104.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.563] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\gmur.xlsx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.563] GetFileType (hFile=0x2d8) returned 0x1 [0104.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.563] GetFileType (hFile=0x2d8) returned 0x1 [0104.563] GetFileSize (in: hFile=0x2d8, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x13870 [0104.563] ReadFile (in: hFile=0x2d8, lpBuffer=0x3074ce0, nNumberOfBytesToRead=0x13870, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x3074ce0*, lpNumberOfBytesRead=0x119eec0*=0x13870, lpOverlapped=0x0) returned 1 [0104.565] CloseHandle (hObject=0x2d8) returned 1 [0104.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx", lpFilePart=0x0) returned 0x28 [0104.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.567] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\gmur.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.567] GetFileType (hFile=0x2d8) returned 0x1 [0104.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.567] GetFileType (hFile=0x2d8) returned 0x1 [0104.567] WriteFile (in: hFile=0x2d8, lpBuffer=0x309c618*, nNumberOfBytesToWrite=0x1386d, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x309c618*, lpNumberOfBytesWritten=0x119eeb0*=0x1386d, lpOverlapped=0x0) returned 1 [0104.568] CloseHandle (hObject=0x2d8) returned 1 [0104.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba88951, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba88951, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba88951, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba88951, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.571] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7e30 [0104.571] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.571] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.572] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7e30 [0104.572] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.572] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.572] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.572] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.572] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.573] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.573] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.573] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.573] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.573] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.573] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.573] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.573] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.573] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.573] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.573] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.573] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.573] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.574] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.574] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.574] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.574] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.574] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.574] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.574] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.574] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.574] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.574] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.574] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.575] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.575] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.575] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.575] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.575] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\gmur.xlsx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015498d, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7015498d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7017abb6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x13870)) returned 1 [0104.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.575] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7e30 [0104.576] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.576] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\gmur.xlsx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015498d, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7015498d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7017abb6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x13870)) returned 1 [0104.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.576] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\gMur.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\gmur.xlsx.lime")) returned 1 [0104.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba88951, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba88951, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba88951, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba88951, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.577] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7e30 [0104.578] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.578] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.578] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7e30 [0104.578] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.578] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.578] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.578] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.578] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.578] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.578] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.579] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.579] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.579] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.579] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.579] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.579] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.579] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.579] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.579] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.581] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.581] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.581] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.581] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.581] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.583] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba88951, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba88951, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9ba88951, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9ba88951, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.583] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.583] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7e30 [0104.583] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.584] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.584] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7e30 [0104.584] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.584] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.584] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.584] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.584] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.584] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.587] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.587] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.587] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.587] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.587] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.587] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.587] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.587] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.587] GetSystemMetrics (nIndex=42) returned 0 [0104.587] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.587] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", lpFilePart=0x0) returned 0x36 [0104.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.587] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\h2pcxtbbfd di.xlsx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.588] GetFileType (hFile=0x2d8) returned 0x1 [0104.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.588] GetFileType (hFile=0x2d8) returned 0x1 [0104.588] GetFileSize (in: hFile=0x2d8, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0xf5d0 [0104.588] ReadFile (in: hFile=0x2d8, lpBuffer=0x2ed51cc, nNumberOfBytesToRead=0xf5d0, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x2ed51cc*, lpNumberOfBytesRead=0x119eec0*=0xf5d0, lpOverlapped=0x0) returned 1 [0104.589] CloseHandle (hObject=0x2d8) returned 1 [0104.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx", lpFilePart=0x0) returned 0x31 [0104.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.592] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\h2pcxtbbfd di.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.592] GetFileType (hFile=0x2d8) returned 0x1 [0104.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.592] GetFileType (hFile=0x2d8) returned 0x1 [0104.592] WriteFile (in: hFile=0x2d8, lpBuffer=0x2ef4d50*, nNumberOfBytesToWrite=0xf5c4, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x2ef4d50*, lpNumberOfBytesWritten=0x119eeb0*=0xf5c4, lpOverlapped=0x0) returned 1 [0104.593] CloseHandle (hObject=0x2d8) returned 1 [0104.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9baaec3e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9baaec3e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9baaec3e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9baaec3e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.595] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.596] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7730 [0104.596] FindNextFileW (in: hFindFile=0x15f7730, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.596] FindClose (in: hFindFile=0x15f7730 | out: hFindFile=0x15f7730) returned 1 [0104.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.596] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f76b0 [0104.596] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.596] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.597] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.597] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.597] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.597] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.597] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.597] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.597] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.597] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.597] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.597] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.597] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.598] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.598] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.598] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.598] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.598] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.598] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.598] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.598] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.598] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.598] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.599] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.599] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.599] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.599] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.599] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.599] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.599] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.599] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.599] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.599] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.600] FindClose (in: hFindFile=0x15f76b0 | out: hFindFile=0x15f76b0) returned 1 [0104.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", lpFilePart=0x0) returned 0x36 [0104.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", lpFilePart=0x0) returned 0x36 [0104.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", lpFilePart=0x0) returned 0x36 [0104.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", lpFilePart=0x0) returned 0x36 [0104.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\h2pcxtbbfd di.xlsx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701a0e3f, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x701a0e3f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701a0e3f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0xf5d0)) returned 1 [0104.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", lpFilePart=0x0) returned 0x36 [0104.600] GetFullPathNameW (in: lpFileName="h2PCXTBBfD dI.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\h2PCXTBBfD dI.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.600] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7130 [0104.600] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.600] FindClose (in: hFindFile=0x15f7130 | out: hFindFile=0x15f7130) returned 1 [0104.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", lpFilePart=0x0) returned 0x36 [0104.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", lpFilePart=0x0) returned 0x36 [0104.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", lpFilePart=0x0) returned 0x36 [0104.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\h2pcxtbbfd di.xlsx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701a0e3f, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x701a0e3f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701a0e3f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0xf5d0)) returned 1 [0104.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime", lpFilePart=0x0) returned 0x36 [0104.601] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\h2PCXTBBfD dI.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\h2pcxtbbfd di.xlsx.lime")) returned 1 [0104.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bad4eb1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bad4eb1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bad4eb1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bad4eb1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.602] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.603] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7170 [0104.603] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.603] FindClose (in: hFindFile=0x15f7170 | out: hFindFile=0x15f7170) returned 1 [0104.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.603] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f74b0 [0104.603] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.603] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.603] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.603] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.604] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.604] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.604] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.604] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.604] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.604] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.604] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.604] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.604] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.604] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.604] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.605] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.605] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.605] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.605] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.605] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.605] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.605] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.605] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.605] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.605] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.606] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.606] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.606] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.606] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.606] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.606] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.606] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.606] FindClose (in: hFindFile=0x15f74b0 | out: hFindFile=0x15f74b0) returned 1 [0104.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bad4eb1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bad4eb1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bad4eb1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bad4eb1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.607] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.607] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7770 [0104.607] FindNextFileW (in: hFindFile=0x15f7770, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.607] FindClose (in: hFindFile=0x15f7770 | out: hFindFile=0x15f7770) returned 1 [0104.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.608] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7470 [0104.608] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.608] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.608] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.608] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.608] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.608] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.608] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.608] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.608] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.608] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.609] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.609] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.609] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.609] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.609] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.609] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.609] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.609] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.609] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.609] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.610] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.610] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.610] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.610] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.610] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.610] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.610] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.610] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.610] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.610] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.611] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.611] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.611] FindClose (in: hFindFile=0x15f7470 | out: hFindFile=0x15f7470) returned 1 [0104.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.611] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.611] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.611] GetSystemMetrics (nIndex=42) returned 0 [0104.611] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.611] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", lpFilePart=0x0) returned 0x36 [0104.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.611] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\iydmli-q8mf8cj.ppt.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.611] GetFileType (hFile=0x2d8) returned 0x1 [0104.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.611] GetFileType (hFile=0x2d8) returned 0x1 [0104.611] GetFileSize (in: hFile=0x2d8, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x4e70 [0104.612] ReadFile (in: hFile=0x2d8, lpBuffer=0x2f171ec, nNumberOfBytesToRead=0x4e70, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x2f171ec*, lpNumberOfBytesRead=0x119eec0*=0x4e70, lpOverlapped=0x0) returned 1 [0104.613] CloseHandle (hObject=0x2d8) returned 1 [0104.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt", lpFilePart=0x0) returned 0x31 [0104.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.614] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\iydmli-q8mf8cj.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0104.614] GetFileType (hFile=0x2d8) returned 0x1 [0104.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.615] GetFileType (hFile=0x2d8) returned 0x1 [0104.615] WriteFile (in: hFile=0x2d8, lpBuffer=0x2f21734*, nNumberOfBytesToWrite=0x4e64, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x2f21734*, lpNumberOfBytesWritten=0x119eeb0*=0x4e64, lpOverlapped=0x0) returned 1 [0104.615] CloseHandle (hObject=0x2d8) returned 1 [0104.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bafb0f6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bafb0f6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bafb0f6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bafb0f6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.617] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.617] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7670 [0104.617] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.617] FindClose (in: hFindFile=0x15f7670 | out: hFindFile=0x15f7670) returned 1 [0104.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.618] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f70f0 [0104.618] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.618] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.618] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.618] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.618] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.618] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.618] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.618] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.619] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.619] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.619] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.619] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.619] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.619] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.619] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.619] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.619] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.619] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.620] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.620] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.620] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.620] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.620] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.620] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.620] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.620] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.620] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.620] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.621] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.621] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.621] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.621] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.621] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.621] FindClose (in: hFindFile=0x15f70f0 | out: hFindFile=0x15f70f0) returned 1 [0104.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", lpFilePart=0x0) returned 0x36 [0104.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", lpFilePart=0x0) returned 0x36 [0104.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", lpFilePart=0x0) returned 0x36 [0104.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", lpFilePart=0x0) returned 0x36 [0104.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\iydmli-q8mf8cj.ppt.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701c714e, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x701c714e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701c714e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x4e70)) returned 1 [0104.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", lpFilePart=0x0) returned 0x36 [0104.622] GetFullPathNameW (in: lpFileName="IYDMli-q8mF8cJ.ppt.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\IYDMli-q8mF8cJ.ppt.Lime", lpFilePart=0x0) returned 0x34 [0104.622] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7670 [0104.622] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.622] FindClose (in: hFindFile=0x15f7670 | out: hFindFile=0x15f7670) returned 1 [0104.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", lpFilePart=0x0) returned 0x36 [0104.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", lpFilePart=0x0) returned 0x36 [0104.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", lpFilePart=0x0) returned 0x36 [0104.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\iydmli-q8mf8cj.ppt.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701c714e, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x701c714e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x701c714e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x4e70)) returned 1 [0104.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime", lpFilePart=0x0) returned 0x36 [0104.623] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\IYDMli-q8mF8cJ.ppt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\iydmli-q8mf8cj.ppt.lime")) returned 1 [0104.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bafb0f6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bafb0f6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bafb0f6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bafb0f6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.624] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.624] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7230 [0104.624] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.624] FindClose (in: hFindFile=0x15f7230 | out: hFindFile=0x15f7230) returned 1 [0104.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.625] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7070 [0104.625] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.625] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.625] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.625] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.625] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.625] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.625] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.626] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.626] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.626] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.626] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.626] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.626] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.626] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.626] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.626] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.626] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.626] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.627] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.627] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.627] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.627] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.627] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.627] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.627] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.627] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.627] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.627] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.628] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.628] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.628] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.628] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.628] FindClose (in: hFindFile=0x15f7070 | out: hFindFile=0x15f7070) returned 1 [0104.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bafb0f6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bafb0f6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bafb0f6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bafb0f6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.629] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.629] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7230 [0104.629] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.629] FindClose (in: hFindFile=0x15f7230 | out: hFindFile=0x15f7230) returned 1 [0104.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.636] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7eb0 [0104.636] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.636] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.636] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.636] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.636] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.636] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.637] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.637] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.637] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.637] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.637] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.637] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.637] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.637] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.637] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.637] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.637] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.638] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.638] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.638] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.638] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.638] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.638] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.638] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.638] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.638] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.638] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.639] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.639] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.639] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.639] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.639] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.639] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.639] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.639] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.639] GetSystemMetrics (nIndex=42) returned 0 [0104.639] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.639] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", lpFilePart=0x0) returned 0x34 [0104.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.639] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my new app.accdb.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.640] GetFileType (hFile=0x298) returned 0x1 [0104.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.640] GetFileType (hFile=0x298) returned 0x1 [0104.640] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x55010 [0104.641] ReadFile (in: hFile=0x298, lpBuffer=0x410b748, nNumberOfBytesToRead=0x55010, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x410b748*, lpNumberOfBytesRead=0x119eec0*=0x55010, lpOverlapped=0x0) returned 1 [0104.643] CloseHandle (hObject=0x298) returned 1 [0104.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb", lpFilePart=0x0) returned 0x2f [0104.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.657] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my new app.accdb"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.658] GetFileType (hFile=0x298) returned 0x1 [0104.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.658] GetFileType (hFile=0x298) returned 0x1 [0104.658] WriteFile (in: hFile=0x298, lpBuffer=0x3eb9390*, nNumberOfBytesToWrite=0x55000, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x3eb9390*, lpNumberOfBytesWritten=0x119eeb0*=0x55000, lpOverlapped=0x0) returned 1 [0104.667] CloseHandle (hObject=0x298) returned 1 [0104.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bb47575, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bb47575, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bb47575, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bb47575, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.673] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.673] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7bf0 [0104.674] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.674] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0104.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.674] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7c70 [0104.674] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.674] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.675] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.675] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.675] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.675] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.675] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.675] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.675] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.675] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.675] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.676] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.676] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.676] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.676] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.676] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.676] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.676] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.676] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.677] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.677] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.677] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.677] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.677] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.677] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.677] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.677] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.678] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.678] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.678] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.678] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.678] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.678] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.678] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", lpFilePart=0x0) returned 0x34 [0104.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", lpFilePart=0x0) returned 0x34 [0104.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", lpFilePart=0x0) returned 0x34 [0104.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", lpFilePart=0x0) returned 0x34 [0104.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my new app.accdb.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701ed330, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x701ed330, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702136a8, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x55010)) returned 1 [0104.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", lpFilePart=0x0) returned 0x34 [0104.679] GetFullPathNameW (in: lpFileName="My New App.accdb.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My New App.accdb.Lime", lpFilePart=0x0) returned 0x32 [0104.679] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7bb0 [0104.679] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.679] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0104.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", lpFilePart=0x0) returned 0x34 [0104.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", lpFilePart=0x0) returned 0x34 [0104.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", lpFilePart=0x0) returned 0x34 [0104.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my new app.accdb.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701ed330, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x701ed330, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702136a8, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x55010)) returned 1 [0104.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime", lpFilePart=0x0) returned 0x34 [0104.680] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My New App.accdb.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my new app.accdb.lime")) returned 1 [0104.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bb93a9c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bb93a9c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bb93a9c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bb93a9c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.683] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.683] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7e70 [0104.684] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.684] FindClose (in: hFindFile=0x15f7e70 | out: hFindFile=0x15f7e70) returned 1 [0104.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.684] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7c70 [0104.684] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.684] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.685] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.685] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.685] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.685] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.685] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.685] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.685] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.685] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.685] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.686] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.686] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.686] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.686] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.686] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.686] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.686] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.686] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.686] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.687] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.687] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.687] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.687] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.687] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.687] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.687] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.687] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.688] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.688] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.688] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.688] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.688] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bb93a9c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bb93a9c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bb93a9c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bb93a9c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.689] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.689] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7eb0 [0104.689] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.689] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.690] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7bb0 [0104.690] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.690] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.690] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.690] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.690] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.690] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.691] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.691] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.691] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.691] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.691] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.691] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.691] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.691] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.691] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.692] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.692] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.692] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.692] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.692] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.692] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.692] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.692] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.693] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.693] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.693] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.693] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.693] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.693] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.693] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.693] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.694] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.694] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0104.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.694] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.694] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.694] GetSystemMetrics (nIndex=42) returned 0 [0104.694] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.694] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", lpFilePart=0x0) returned 0x37 [0104.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.694] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\o9jfc-djnb qx4.pptx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.694] GetFileType (hFile=0x298) returned 0x1 [0104.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.694] GetFileType (hFile=0x298) returned 0x1 [0104.694] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x6b20 [0104.694] ReadFile (in: hFile=0x298, lpBuffer=0x2edc2c0, nNumberOfBytesToRead=0x6b20, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x2edc2c0*, lpNumberOfBytesRead=0x119eec0*=0x6b20, lpOverlapped=0x0) returned 1 [0104.696] CloseHandle (hObject=0x298) returned 1 [0104.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx", lpFilePart=0x0) returned 0x32 [0104.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.698] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\o9jfc-djnb qx4.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.698] GetFileType (hFile=0x298) returned 0x1 [0104.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.698] GetFileType (hFile=0x298) returned 0x1 [0104.698] WriteFile (in: hFile=0x298, lpBuffer=0x2eea8e8*, nNumberOfBytesToWrite=0x6b14, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x2eea8e8*, lpNumberOfBytesWritten=0x119eeb0*=0x6b14, lpOverlapped=0x0) returned 1 [0104.699] CloseHandle (hObject=0x298) returned 1 [0104.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bbb9cf7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bbb9cf7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bbb9cf7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bbb9cf7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.701] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.701] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7830 [0104.701] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.701] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.701] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7e30 [0104.701] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.702] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.702] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.702] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.702] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.702] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.702] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.702] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.702] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.702] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.702] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.702] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.703] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.703] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.703] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.703] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.703] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.703] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.703] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.703] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.703] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.703] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.704] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.704] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.704] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.704] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.704] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.704] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.704] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.704] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.704] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.704] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.705] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.705] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", lpFilePart=0x0) returned 0x37 [0104.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", lpFilePart=0x0) returned 0x37 [0104.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", lpFilePart=0x0) returned 0x37 [0104.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", lpFilePart=0x0) returned 0x37 [0104.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\o9jfc-djnb qx4.pptx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702136a8, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x702136a8, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702136a8, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x6b20)) returned 1 [0104.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", lpFilePart=0x0) returned 0x37 [0104.705] GetFullPathNameW (in: lpFileName="o9Jfc-DjnB qX4.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\o9Jfc-DjnB qX4.pptx.Lime", lpFilePart=0x0) returned 0x35 [0104.705] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7bb0 [0104.705] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.705] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0104.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", lpFilePart=0x0) returned 0x37 [0104.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", lpFilePart=0x0) returned 0x37 [0104.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", lpFilePart=0x0) returned 0x37 [0104.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\o9jfc-djnb qx4.pptx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702136a8, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x702136a8, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702136a8, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x6b20)) returned 1 [0104.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime", lpFilePart=0x0) returned 0x37 [0104.706] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\o9Jfc-DjnB qX4.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\o9jfc-djnb qx4.pptx.lime")) returned 1 [0104.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bbb9cf7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bbb9cf7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bbb9cf7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bbb9cf7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.707] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.707] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7bb0 [0104.707] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.708] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0104.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.708] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7bb0 [0104.708] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.708] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.708] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.708] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.708] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.708] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.709] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.709] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.709] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.709] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.709] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.709] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.709] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.709] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.709] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.709] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.709] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.709] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.710] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.710] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.710] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.710] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.710] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.710] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.710] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.710] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.710] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.710] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.711] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.711] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.711] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.711] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.711] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0104.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bbb9cf7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bbb9cf7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bbb9cf7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bbb9cf7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.712] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.712] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7bb0 [0104.712] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.712] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0104.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.712] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7d30 [0104.712] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.712] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.712] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.712] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.714] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.714] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.714] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.714] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.714] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.714] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.714] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.714] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.714] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.714] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.714] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.715] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.715] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.715] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.715] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.715] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.715] FindClose (in: hFindFile=0x15f7d30 | out: hFindFile=0x15f7d30) returned 1 [0104.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.715] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.715] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.715] GetSystemMetrics (nIndex=42) returned 0 [0104.715] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.715] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.715] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", lpFilePart=0x0) returned 0x33 [0104.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.715] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oczespochpv.csv.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.715] GetFileType (hFile=0x298) returned 0x1 [0104.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.716] GetFileType (hFile=0x298) returned 0x1 [0104.716] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x185a0 [0104.716] ReadFile (in: hFile=0x298, lpBuffer=0x3f0e3b0, nNumberOfBytesToRead=0x185a0, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x3f0e3b0*, lpNumberOfBytesRead=0x119eec0*=0x185a0, lpOverlapped=0x0) returned 1 [0104.717] CloseHandle (hObject=0x298) returned 1 [0104.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv", lpFilePart=0x0) returned 0x2e [0104.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.720] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oczespochpv.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.720] GetFileType (hFile=0x298) returned 0x1 [0104.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.720] GetFileType (hFile=0x298) returned 0x1 [0104.720] WriteFile (in: hFile=0x298, lpBuffer=0x3f3ef30*, nNumberOfBytesToWrite=0x1859a, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x3f3ef30*, lpNumberOfBytesWritten=0x119eeb0*=0x1859a, lpOverlapped=0x0) returned 1 [0104.721] CloseHandle (hObject=0x298) returned 1 [0104.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bbdff3f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bbdff3f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bbdff3f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bbdff3f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.723] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.723] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7cb0 [0104.724] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.724] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.724] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7bf0 [0104.724] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.724] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.724] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.724] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.724] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.725] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.725] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.725] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.725] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.725] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.725] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.725] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.725] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.725] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.725] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.725] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.725] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.726] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.726] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.726] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.726] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.726] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.726] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.726] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.726] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.726] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.726] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.726] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.727] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.727] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.727] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.727] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.727] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.727] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0104.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", lpFilePart=0x0) returned 0x33 [0104.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", lpFilePart=0x0) returned 0x33 [0104.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", lpFilePart=0x0) returned 0x33 [0104.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", lpFilePart=0x0) returned 0x33 [0104.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oczespochpv.csv.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7025f9cc, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7025f9cc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7025f9cc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x185a0)) returned 1 [0104.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", lpFilePart=0x0) returned 0x33 [0104.728] GetFullPathNameW (in: lpFileName="OCZESPOCHPv.csv.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\OCZESPOCHPv.csv.Lime", lpFilePart=0x0) returned 0x31 [0104.728] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7bf0 [0104.728] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.728] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0104.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", lpFilePart=0x0) returned 0x33 [0104.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", lpFilePart=0x0) returned 0x33 [0104.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", lpFilePart=0x0) returned 0x33 [0104.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oczespochpv.csv.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7025f9cc, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7025f9cc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7025f9cc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x185a0)) returned 1 [0104.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime", lpFilePart=0x0) returned 0x33 [0104.728] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OCZESPOCHPv.csv.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oczespochpv.csv.lime")) returned 1 [0104.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc060f1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc060f1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc060f1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc060f1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.730] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.730] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7cb0 [0104.730] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.730] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.730] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7bf0 [0104.730] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.731] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.731] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.731] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.731] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.731] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.731] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.731] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.731] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.731] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.731] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.731] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.731] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.732] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.732] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.732] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.732] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.732] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.732] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.732] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.732] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.732] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.732] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.733] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.733] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.733] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.733] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.733] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.733] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.733] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.733] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.733] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.733] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0104.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc060f1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc060f1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc060f1, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc060f1, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.734] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.734] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7e30 [0104.734] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.734] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.735] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7bf0 [0104.735] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.735] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.735] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.735] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.735] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.735] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.735] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.735] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.735] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.735] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.736] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.736] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.736] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.736] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.736] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.736] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.736] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.736] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.736] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.736] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.736] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.737] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.737] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.737] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.737] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.737] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.737] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.737] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.737] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.737] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.737] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.737] FindNextFileW (in: hFindFile=0x15f7bf0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.737] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0104.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.738] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.738] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.738] GetSystemMetrics (nIndex=42) returned 0 [0104.738] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.738] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.738] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oojiqe2ti5vbxcbhng2.docx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.738] GetFileType (hFile=0x298) returned 0x1 [0104.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.738] GetFileType (hFile=0x298) returned 0x1 [0104.738] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x6b0 [0104.738] ReadFile (in: hFile=0x298, lpBuffer=0x2f17d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x2f17d80*, lpNumberOfBytesRead=0x119eec0*=0x6b0, lpOverlapped=0x0) returned 1 [0104.748] CloseHandle (hObject=0x298) returned 1 [0104.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx", lpFilePart=0x0) returned 0x37 [0104.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.748] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oojiqe2ti5vbxcbhng2.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.749] GetFileType (hFile=0x298) returned 0x1 [0104.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.749] GetFileType (hFile=0x298) returned 0x1 [0104.749] WriteFile (in: hFile=0x298, lpBuffer=0x2f1a490*, nNumberOfBytesToWrite=0x6a6, lpNumberOfBytesWritten=0x119ee84, lpOverlapped=0x0 | out: lpBuffer=0x2f1a490*, lpNumberOfBytesWritten=0x119ee84*=0x6a6, lpOverlapped=0x0) returned 1 [0104.749] CloseHandle (hObject=0x298) returned 1 [0104.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc3ff25, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc3ff25, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc3ff25, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc3ff25, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.751] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.751] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7cb0 [0104.751] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.751] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.752] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7830 [0104.752] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.752] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.752] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.752] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.752] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.752] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.752] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.752] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.752] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.753] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.753] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.753] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.753] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.753] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.753] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.753] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.753] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.753] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.753] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.753] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.753] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.754] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.754] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.754] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.754] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.754] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.754] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.754] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.754] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.754] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.754] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.754] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.754] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.755] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oojiqe2ti5vbxcbhng2.docx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70285c33, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70285c33, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70285c33, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0104.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.755] GetFullPathNameW (in: lpFileName="oOjIQe2Ti5VBxCBHnG2.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", lpFilePart=0x0) returned 0x3a [0104.755] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7c30 [0104.755] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.755] FindClose (in: hFindFile=0x15f7c30 | out: hFindFile=0x15f7c30) returned 1 [0104.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oojiqe2ti5vbxcbhng2.docx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70285c33, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70285c33, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70285c33, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0104.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime", lpFilePart=0x0) returned 0x3c [0104.756] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\oOjIQe2Ti5VBxCBHnG2.docx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\oojiqe2ti5vbxcbhng2.docx.lime")) returned 1 [0104.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc52606, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc52606, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc52606, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc52606, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.757] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.757] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7c30 [0104.757] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.757] FindClose (in: hFindFile=0x15f7c30 | out: hFindFile=0x15f7c30) returned 1 [0104.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.758] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7c30 [0104.758] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.758] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.758] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.758] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.758] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.758] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.758] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.758] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.758] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.759] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.759] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.759] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.759] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.759] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.759] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.759] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.759] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.759] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.759] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.759] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.759] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.760] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.760] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.760] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.760] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.760] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.760] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.760] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.760] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.760] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.760] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.760] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.760] FindClose (in: hFindFile=0x15f7c30 | out: hFindFile=0x15f7c30) returned 1 [0104.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc52606, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc52606, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc52606, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc52606, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.761] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.761] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7c30 [0104.761] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.761] FindClose (in: hFindFile=0x15f7c30 | out: hFindFile=0x15f7c30) returned 1 [0104.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.762] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7c30 [0104.762] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.762] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.762] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.762] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.762] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.762] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.762] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.762] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.762] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.763] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.763] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.763] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.763] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.763] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.763] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.763] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.763] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.763] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.763] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.763] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.763] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.764] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.764] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.764] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.764] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.764] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.764] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.764] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.764] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.764] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.764] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.764] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.764] FindClose (in: hFindFile=0x15f7c30 | out: hFindFile=0x15f7c30) returned 1 [0104.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.765] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.765] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.765] GetSystemMetrics (nIndex=42) returned 0 [0104.765] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.765] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", lpFilePart=0x0) returned 0x39 [0104.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.765] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\opm-kssufbhrnfhi.pptx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.765] GetFileType (hFile=0x298) returned 0x1 [0104.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.765] GetFileType (hFile=0x298) returned 0x1 [0104.765] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x125b0 [0104.765] ReadFile (in: hFile=0x298, lpBuffer=0x2f39c54, nNumberOfBytesToRead=0x125b0, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x2f39c54*, lpNumberOfBytesRead=0x119eec0*=0x125b0, lpOverlapped=0x0) returned 1 [0104.766] CloseHandle (hObject=0x298) returned 1 [0104.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx", lpFilePart=0x0) returned 0x34 [0104.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.768] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\opm-kssufbhrnfhi.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.769] GetFileType (hFile=0x298) returned 0x1 [0104.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.769] GetFileType (hFile=0x298) returned 0x1 [0104.769] WriteFile (in: hFile=0x298, lpBuffer=0x2f5f024*, nNumberOfBytesToWrite=0x125a9, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x2f5f024*, lpNumberOfBytesWritten=0x119eeb0*=0x125a9, lpOverlapped=0x0) returned 1 [0104.770] CloseHandle (hObject=0x298) returned 1 [0104.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc52606, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc52606, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc52606, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc52606, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.772] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.772] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7cb0 [0104.772] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.772] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.773] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7c70 [0104.773] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.773] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.773] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.773] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.773] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.773] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.773] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.773] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.773] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.774] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.774] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.774] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.774] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.774] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.774] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.774] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.774] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.774] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.774] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.774] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.775] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.775] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.775] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.775] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.775] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.775] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.775] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.775] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.775] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.775] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.775] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.775] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.776] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.776] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", lpFilePart=0x0) returned 0x39 [0104.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", lpFilePart=0x0) returned 0x39 [0104.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", lpFilePart=0x0) returned 0x39 [0104.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", lpFilePart=0x0) returned 0x39 [0104.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\opm-kssufbhrnfhi.pptx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70285c33, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70285c33, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70285c33, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x125b0)) returned 1 [0104.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", lpFilePart=0x0) returned 0x39 [0104.776] GetFullPathNameW (in: lpFileName="Opm-KSsufbHrNFHI.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Opm-KSsufbHrNFHI.pptx.Lime", lpFilePart=0x0) returned 0x37 [0104.776] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7c70 [0104.776] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.776] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", lpFilePart=0x0) returned 0x39 [0104.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", lpFilePart=0x0) returned 0x39 [0104.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", lpFilePart=0x0) returned 0x39 [0104.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\opm-kssufbhrnfhi.pptx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70285c33, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70285c33, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70285c33, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x125b0)) returned 1 [0104.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime", lpFilePart=0x0) returned 0x39 [0104.777] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Opm-KSsufbHrNFHI.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\opm-kssufbhrnfhi.pptx.lime")) returned 1 [0104.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc787f6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc787f6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc787f6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc787f6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.778] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.778] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7c70 [0104.779] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.779] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.779] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7f30 [0104.779] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.779] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.779] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.779] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.779] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.779] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.780] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.780] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.780] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.780] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.780] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.780] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.780] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.780] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.780] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.780] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.780] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.780] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.781] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.781] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.781] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.781] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.781] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.781] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.781] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.781] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.781] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.781] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.781] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.782] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.782] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.782] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.782] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0104.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc787f6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc787f6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc787f6, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc787f6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.782] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.783] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7c70 [0104.783] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.783] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.783] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7c70 [0104.783] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.783] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.783] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.783] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.784] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.784] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.784] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.784] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.784] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.784] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.784] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.784] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.784] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.784] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.784] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.784] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.785] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.785] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.785] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.785] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.785] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.785] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.785] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.785] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.785] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.785] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.785] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.786] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.786] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.786] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.786] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.786] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.786] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0104.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.786] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.786] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.786] GetSystemMetrics (nIndex=42) returned 0 [0104.786] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.786] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.786] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\sbSKABnlrTuf_M3v.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\sbskabnlrtuf_m3v.pps.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.787] GetFileType (hFile=0x298) returned 0x1 [0104.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.787] GetFileType (hFile=0x298) returned 0x1 [0104.787] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x7a70 [0104.787] ReadFile (in: hFile=0x298, lpBuffer=0x2f84328, nNumberOfBytesToRead=0x7a70, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x2f84328*, lpNumberOfBytesRead=0x119eec0*=0x7a70, lpOverlapped=0x0) returned 1 [0104.788] CloseHandle (hObject=0x298) returned 1 [0104.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.789] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\sbSKABnlrTuf_M3v.pps" (normalized: "c:\\users\\5jghkoaofdp\\documents\\sbskabnlrtuf_m3v.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.789] GetFileType (hFile=0x298) returned 0x1 [0104.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.789] GetFileType (hFile=0x298) returned 0x1 [0104.789] WriteFile (in: hFile=0x298, lpBuffer=0x2f94074*, nNumberOfBytesToWrite=0x7a6b, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x2f94074*, lpNumberOfBytesWritten=0x119eeb0*=0x7a6b, lpOverlapped=0x0) returned 1 [0104.790] CloseHandle (hObject=0x298) returned 1 [0104.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc9eaf7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc9eaf7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc9eaf7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc9eaf7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.791] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7cb0 [0104.791] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.792] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.792] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7cb0 [0104.792] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.792] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.792] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.792] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.792] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.792] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.792] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.793] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.793] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.793] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.793] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.793] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.793] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.793] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.793] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.793] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.793] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.793] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.793] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.794] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.794] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.794] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.794] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.794] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.794] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.794] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.794] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.794] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.794] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.794] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.794] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.795] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.795] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.795] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.796] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\sbSKABnlrTuf_M3v.pps.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7e30 [0104.796] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.796] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.798] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7830 [0104.798] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.798] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.799] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7d30 [0104.799] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.799] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.799] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.799] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.799] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.799] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.799] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.799] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.799] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.799] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.800] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.800] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.800] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.800] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.800] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.800] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.800] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.800] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.800] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.800] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.800] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.801] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.801] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.801] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.801] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.801] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.801] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.801] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.801] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.801] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.801] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.801] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.801] FindClose (in: hFindFile=0x15f7d30 | out: hFindFile=0x15f7d30) returned 1 [0104.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc9eaf7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc9eaf7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bc9eaf7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bc9eaf7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.802] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.802] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7cb0 [0104.802] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.802] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0104.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.803] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7eb0 [0104.803] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.803] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.803] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.803] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.803] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.803] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.803] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.803] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.803] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.804] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.804] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.804] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.804] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.804] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.804] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.804] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.804] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.804] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.804] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.804] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.805] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.805] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.805] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.805] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.805] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.805] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.805] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.805] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.805] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.805] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.805] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.805] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.805] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.806] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.806] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.806] GetSystemMetrics (nIndex=42) returned 0 [0104.806] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.806] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.806] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\vuzmaoyqtk9.xlsx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.806] GetFileType (hFile=0x298) returned 0x1 [0104.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.806] GetFileType (hFile=0x298) returned 0x1 [0104.806] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x4510 [0104.806] ReadFile (in: hFile=0x298, lpBuffer=0x2fae7ac, nNumberOfBytesToRead=0x4510, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x2fae7ac*, lpNumberOfBytesRead=0x119eec0*=0x4510, lpOverlapped=0x0) returned 1 [0104.807] CloseHandle (hObject=0x298) returned 1 [0104.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx", lpFilePart=0x0) returned 0x2f [0104.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.808] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\vuzmaoyqtk9.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.808] GetFileType (hFile=0x298) returned 0x1 [0104.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.808] GetFileType (hFile=0x298) returned 0x1 [0104.808] WriteFile (in: hFile=0x298, lpBuffer=0x2fb7a30*, nNumberOfBytesToWrite=0x450b, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x2fb7a30*, lpNumberOfBytesWritten=0x119eeb0*=0x450b, lpOverlapped=0x0) returned 1 [0104.809] CloseHandle (hObject=0x298) returned 1 [0104.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bcc4cbf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bcc4cbf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bcc4cbf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bcc4cbf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.810] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.810] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7d30 [0104.811] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.811] FindClose (in: hFindFile=0x15f7d30 | out: hFindFile=0x15f7d30) returned 1 [0104.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.811] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7e30 [0104.811] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.811] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.811] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.811] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.811] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.812] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.812] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.812] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.812] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.812] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.812] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.812] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.812] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.812] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.812] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.812] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.812] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.812] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.813] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.813] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.813] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.813] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.813] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.813] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.813] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.813] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.813] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.813] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.813] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.814] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.814] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.814] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.814] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.814] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\vuzmaoyqtk9.xlsx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702ac0df, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x702ac0df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702ac0df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x4510)) returned 1 [0104.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.814] GetFullPathNameW (in: lpFileName="VUzmAoyqtk9.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\VUzmAoyqtk9.xlsx.Lime", lpFilePart=0x0) returned 0x32 [0104.814] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7d30 [0104.814] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.815] FindClose (in: hFindFile=0x15f7d30 | out: hFindFile=0x15f7d30) returned 1 [0104.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\vuzmaoyqtk9.xlsx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702ac0df, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x702ac0df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702ac0df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x4510)) returned 1 [0104.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.815] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\VUzmAoyqtk9.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\vuzmaoyqtk9.xlsx.lime")) returned 1 [0104.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bcc4cbf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bcc4cbf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bcc4cbf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bcc4cbf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.816] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.816] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7830 [0104.816] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.816] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.817] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7d30 [0104.817] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.817] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.817] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.817] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.817] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.817] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.817] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.817] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.817] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.817] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.818] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.818] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.818] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.818] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.818] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.818] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.818] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.818] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.818] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.818] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.818] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.818] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.819] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.819] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.819] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.819] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.819] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.819] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.819] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.819] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.819] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.819] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.819] FindClose (in: hFindFile=0x15f7d30 | out: hFindFile=0x15f7d30) returned 1 [0104.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bcc4cbf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bcc4cbf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bcc4cbf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bcc4cbf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.820] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.820] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7d30 [0104.820] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.820] FindClose (in: hFindFile=0x15f7d30 | out: hFindFile=0x15f7d30) returned 1 [0104.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.820] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7d30 [0104.821] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.821] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.821] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.821] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.821] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.821] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.821] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.821] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.821] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.821] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.821] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.821] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.822] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.822] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.822] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.822] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.822] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.822] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.822] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.822] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.822] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.822] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.822] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.823] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.823] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.823] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.823] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.823] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.823] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.823] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.823] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.823] FindNextFileW (in: hFindFile=0x15f7d30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.823] FindClose (in: hFindFile=0x15f7d30 | out: hFindFile=0x15f7d30) returned 1 [0104.823] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.823] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.823] GetSystemMetrics (nIndex=42) returned 0 [0104.823] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.823] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", lpFilePart=0x0) returned 0x32 [0104.824] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\vy83cxy9y.pptx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.824] GetFileType (hFile=0x298) returned 0x1 [0104.824] GetFileType (hFile=0x298) returned 0x1 [0104.824] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0xcd80 [0104.824] ReadFile (in: hFile=0x298, lpBuffer=0x2fceab0, nNumberOfBytesToRead=0xcd80, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x2fceab0*, lpNumberOfBytesRead=0x119eec0*=0xcd80, lpOverlapped=0x0) returned 1 [0104.825] CloseHandle (hObject=0x298) returned 1 [0104.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx", lpFilePart=0x0) returned 0x2d [0104.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.827] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\vy83cxy9y.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.827] GetFileType (hFile=0x298) returned 0x1 [0104.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.827] GetFileType (hFile=0x298) returned 0x1 [0104.827] WriteFile (in: hFile=0x298, lpBuffer=0x2fe8e10*, nNumberOfBytesToWrite=0xcd78, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x2fe8e10*, lpNumberOfBytesWritten=0x119eeb0*=0xcd78, lpOverlapped=0x0) returned 1 [0104.828] CloseHandle (hObject=0x298) returned 1 [0104.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bceaf5f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bceaf5f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bceaf5f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bceaf5f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.829] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.829] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7e70 [0104.829] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.830] FindClose (in: hFindFile=0x15f7e70 | out: hFindFile=0x15f7e70) returned 1 [0104.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.830] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7e30 [0104.830] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.830] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.830] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.830] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.830] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.830] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.830] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.830] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.831] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.831] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.831] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.831] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.831] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.831] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.831] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.831] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.831] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.831] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.831] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.831] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.832] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.832] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.832] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.832] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.832] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.832] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.832] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.832] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.832] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.832] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.832] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.832] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.833] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.833] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", lpFilePart=0x0) returned 0x32 [0104.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", lpFilePart=0x0) returned 0x32 [0104.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", lpFilePart=0x0) returned 0x32 [0104.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", lpFilePart=0x0) returned 0x32 [0104.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\vy83cxy9y.pptx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702ac0df, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x702ac0df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702ac0df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0xcd80)) returned 1 [0104.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", lpFilePart=0x0) returned 0x32 [0104.833] GetFullPathNameW (in: lpFileName="vy83CXY9Y.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\vy83CXY9Y.pptx.Lime", lpFilePart=0x0) returned 0x30 [0104.833] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7e30 [0104.833] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.833] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", lpFilePart=0x0) returned 0x32 [0104.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", lpFilePart=0x0) returned 0x32 [0104.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", lpFilePart=0x0) returned 0x32 [0104.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\vy83cxy9y.pptx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702ac0df, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x702ac0df, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702ac0df, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0xcd80)) returned 1 [0104.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime", lpFilePart=0x0) returned 0x32 [0104.834] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\vy83CXY9Y.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\vy83cxy9y.pptx.lime")) returned 1 [0104.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd1117f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd1117f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd1117f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd1117f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.835] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.835] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7e30 [0104.835] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.835] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.835] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7e30 [0104.835] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.836] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.836] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.836] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.836] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.836] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.836] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.836] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.836] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.836] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.836] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.836] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.836] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.836] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.836] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.837] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.837] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.837] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.837] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.837] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.837] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.837] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.837] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.837] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.837] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.837] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.838] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.838] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.838] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.838] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.838] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.838] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.838] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd1117f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd1117f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd1117f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd1117f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.839] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.839] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7e70 [0104.839] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.839] FindClose (in: hFindFile=0x15f7e70 | out: hFindFile=0x15f7e70) returned 1 [0104.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.839] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7e30 [0104.839] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.839] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.839] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.839] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.839] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.840] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.840] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.840] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.840] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.840] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.840] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.840] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.840] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.840] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.840] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.840] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.840] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.840] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.841] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.841] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.841] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.841] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.841] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.841] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.841] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.841] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.841] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.841] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.841] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.841] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.842] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.842] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.842] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.842] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.842] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.842] GetSystemMetrics (nIndex=42) returned 0 [0104.842] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.842] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.842] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\wvqxspnlmsl.xlsx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.842] GetFileType (hFile=0x298) returned 0x1 [0104.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.842] GetFileType (hFile=0x298) returned 0x1 [0104.842] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x16130 [0104.842] ReadFile (in: hFile=0x298, lpBuffer=0x3f574e8, nNumberOfBytesToRead=0x16130, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x3f574e8*, lpNumberOfBytesRead=0x119eec0*=0x16130, lpOverlapped=0x0) returned 1 [0104.843] CloseHandle (hObject=0x298) returned 1 [0104.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx", lpFilePart=0x0) returned 0x2f [0104.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.845] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\wvqxspnlmsl.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.846] GetFileType (hFile=0x298) returned 0x1 [0104.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.846] GetFileType (hFile=0x298) returned 0x1 [0104.846] WriteFile (in: hFile=0x298, lpBuffer=0x3f83788*, nNumberOfBytesToWrite=0x16126, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x3f83788*, lpNumberOfBytesWritten=0x119eeb0*=0x16126, lpOverlapped=0x0) returned 1 [0104.847] CloseHandle (hObject=0x298) returned 1 [0104.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd1117f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd1117f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd1117f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd1117f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.849] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.849] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7e70 [0104.850] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.850] FindClose (in: hFindFile=0x15f7e70 | out: hFindFile=0x15f7e70) returned 1 [0104.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.850] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7e70 [0104.850] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.850] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.850] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.850] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.850] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.850] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.851] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.851] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.851] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.851] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.851] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.851] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.851] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.851] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.851] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.851] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.851] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.851] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.852] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.852] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.852] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.852] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.852] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.852] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.852] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.852] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.852] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.852] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.852] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.853] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.853] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.853] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.853] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.853] FindClose (in: hFindFile=0x15f7e70 | out: hFindFile=0x15f7e70) returned 1 [0104.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\wvqxspnlmsl.xlsx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702d20eb, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x702d20eb, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702d20eb, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x16130)) returned 1 [0104.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.853] GetFullPathNameW (in: lpFileName="wvqxSPNlMSl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\wvqxSPNlMSl.xlsx.Lime", lpFilePart=0x0) returned 0x32 [0104.853] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7e70 [0104.854] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.854] FindClose (in: hFindFile=0x15f7e70 | out: hFindFile=0x15f7e70) returned 1 [0104.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\wvqxspnlmsl.xlsx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702d20eb, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x702d20eb, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702d20eb, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x16130)) returned 1 [0104.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime", lpFilePart=0x0) returned 0x34 [0104.854] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\wvqxSPNlMSl.xlsx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\wvqxspnlmsl.xlsx.lime")) returned 1 [0104.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd37b3c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd37b3c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd37b3c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd37b3c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.856] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.856] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7e70 [0104.856] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.856] FindClose (in: hFindFile=0x15f7e70 | out: hFindFile=0x15f7e70) returned 1 [0104.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.856] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7eb0 [0104.856] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.856] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.856] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.856] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.857] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.857] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.857] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.857] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.857] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.857] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.857] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.857] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.857] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.857] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.857] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.857] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.858] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.858] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.858] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.858] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.858] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.858] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.858] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.858] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.858] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.858] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.858] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.858] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.859] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.859] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.859] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.859] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.859] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd37b3c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd37b3c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd37b3c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd37b3c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.860] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.860] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7e70 [0104.860] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.860] FindClose (in: hFindFile=0x15f7e70 | out: hFindFile=0x15f7e70) returned 1 [0104.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.860] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7e70 [0104.860] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.860] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.860] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.860] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.861] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.861] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.861] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.861] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.861] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.861] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.861] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.861] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.861] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.861] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.861] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.861] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.861] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.862] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.862] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.862] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.862] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.862] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.862] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.862] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.862] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.862] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.862] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.862] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.863] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.863] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.863] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.863] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.863] FindClose (in: hFindFile=0x15f7e70 | out: hFindFile=0x15f7e70) returned 1 [0104.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.863] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.863] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.863] GetSystemMetrics (nIndex=42) returned 0 [0104.863] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.863] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0104.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", lpFilePart=0x0) returned 0x33 [0104.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.863] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\x7nab3sx5u.pptx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.863] GetFileType (hFile=0x298) returned 0x1 [0104.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.863] GetFileType (hFile=0x298) returned 0x1 [0104.863] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0x178c0 [0104.863] ReadFile (in: hFile=0x298, lpBuffer=0x3f998d0, nNumberOfBytesToRead=0x178c0, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x3f998d0*, lpNumberOfBytesRead=0x119eec0*=0x178c0, lpOverlapped=0x0) returned 1 [0104.864] CloseHandle (hObject=0x298) returned 1 [0104.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx", lpFilePart=0x0) returned 0x2e [0104.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0104.867] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\x7nab3sx5u.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.867] GetFileType (hFile=0x298) returned 0x1 [0104.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0104.867] GetFileType (hFile=0x298) returned 0x1 [0104.867] WriteFile (in: hFile=0x298, lpBuffer=0x3fc8a90*, nNumberOfBytesToWrite=0x178ba, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x3fc8a90*, lpNumberOfBytesWritten=0x119eeb0*=0x178ba, lpOverlapped=0x0) returned 1 [0104.868] CloseHandle (hObject=0x298) returned 1 [0104.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd5d601, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd5d601, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd5d601, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd5d601, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.870] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.870] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7eb0 [0104.871] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.871] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.871] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7eb0 [0104.871] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.871] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.871] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.871] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.871] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.872] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.872] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.872] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.872] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.872] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.872] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.872] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.872] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.872] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.872] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.872] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.872] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.872] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.873] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.873] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.873] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.873] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.873] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.873] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.873] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.873] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.873] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.873] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.873] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.873] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.874] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.874] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.874] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.874] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", lpFilePart=0x0) returned 0x33 [0104.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", lpFilePart=0x0) returned 0x33 [0104.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", lpFilePart=0x0) returned 0x33 [0104.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", lpFilePart=0x0) returned 0x33 [0104.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0104.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\x7nab3sx5u.pptx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f8366, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x178c0)) returned 1 [0104.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0104.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", lpFilePart=0x0) returned 0x33 [0104.874] GetFullPathNameW (in: lpFileName="x7naB3SX5u.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\x7naB3SX5u.pptx.Lime", lpFilePart=0x0) returned 0x31 [0104.874] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7eb0 [0104.874] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0104.874] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0104.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0104.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", lpFilePart=0x0) returned 0x33 [0104.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", lpFilePart=0x0) returned 0x33 [0104.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", lpFilePart=0x0) returned 0x33 [0104.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0104.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\x7nab3sx5u.pptx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f8366, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x702f8366, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x702f8366, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x178c0)) returned 1 [0104.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0104.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime", lpFilePart=0x0) returned 0x33 [0104.875] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\x7naB3SX5u.pptx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\x7nab3sx5u.pptx.lime")) returned 1 [0104.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd5d601, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd5d601, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd5d601, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd5d601, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.876] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.876] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7830 [0104.876] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.876] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.877] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7eb0 [0104.877] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.877] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.877] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.877] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.877] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.877] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.877] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.878] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.878] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.878] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.878] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.878] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.878] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.878] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.878] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.879] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.879] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.879] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.879] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.879] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.879] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.879] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.879] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.880] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.880] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.880] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.880] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.880] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.880] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.880] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.880] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.881] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.881] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0104.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd5d601, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd5d601, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0104.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0104.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd5d601, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd5d601, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0104.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0104.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0104.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.881] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0104.881] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7eb0 [0104.881] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0104.882] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0104.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0104.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0104.882] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7eb0 [0104.882] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.882] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.882] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.882] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.882] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.882] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.882] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.883] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.883] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.883] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.883] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.883] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.883] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.883] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.883] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.883] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.884] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.884] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.884] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.884] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.884] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.884] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.884] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.884] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.884] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.884] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.884] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.885] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.885] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.885] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.885] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0104.885] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0104.885] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0104.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0104.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0104.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70390e5e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70390e5e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0104.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0104.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70390e5e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70390e5e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0104.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0104.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.886] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.886] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7830 [0104.886] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.886] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0104.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0104.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.886] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7830 [0104.886] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.886] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.887] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.887] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.887] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.887] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.887] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.887] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.887] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.887] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.887] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.887] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0104.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70390e5e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70390e5e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0104.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0104.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70390e5e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70390e5e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0104.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0104.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.888] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.888] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7830 [0104.888] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.888] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0104.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0104.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.888] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7830 [0104.888] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.888] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.889] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.889] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.889] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.889] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.889] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.889] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.889] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.889] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.889] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.889] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0104.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70390e5e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70390e5e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0104.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0104.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x70390e5e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70390e5e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0104.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0104.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.890] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.890] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7eb0 [0104.890] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.890] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0104.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0104.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.890] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7eb0 [0104.890] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.890] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.890] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.890] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.891] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.891] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.891] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.891] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.891] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.891] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.891] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.891] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0104.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.891] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.891] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.891] GetSystemMetrics (nIndex=42) returned 0 [0104.891] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.891] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0104.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\0r-uDW4THkIUpl-oRh_.odt.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\0r-uDW4THkIUpl-oRh_.odt.Lime", lpFilePart=0x0) returned 0x48 [0104.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0104.891] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\0r-uDW4THkIUpl-oRh_.odt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\0r-udw4thkiupl-orh_.odt.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.891] GetFileType (hFile=0x298) returned 0x1 [0104.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0104.891] GetFileType (hFile=0x298) returned 0x1 [0104.891] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119eed4 | out: lpFileSizeHigh=0x119eed4*=0x0) returned 0x17ba0 [0104.891] ReadFile (in: hFile=0x298, lpBuffer=0x3fe0368, nNumberOfBytesToRead=0x17ba0, lpNumberOfBytesRead=0x119ee80, lpOverlapped=0x0 | out: lpBuffer=0x3fe0368*, lpNumberOfBytesRead=0x119ee80*=0x17ba0, lpOverlapped=0x0) returned 1 [0104.893] CloseHandle (hObject=0x298) returned 1 [0104.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb8) returned 1 [0104.897] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\0r-uDW4THkIUpl-oRh_.odt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\0r-udw4thkiupl-orh_.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.897] GetFileType (hFile=0x298) returned 0x1 [0104.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb4) returned 1 [0104.897] GetFileType (hFile=0x298) returned 0x1 [0104.897] WriteFile (in: hFile=0x298, lpBuffer=0x400fae8*, nNumberOfBytesToWrite=0x17b9c, lpNumberOfBytesWritten=0x119ee70, lpOverlapped=0x0 | out: lpBuffer=0x400fae8*, lpNumberOfBytesWritten=0x119ee70*=0x17b9c, lpOverlapped=0x0) returned 1 [0104.898] CloseHandle (hObject=0x298) returned 1 [0104.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0104.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bda9b08, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bda9b08, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0104.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0104.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bda9b08, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bda9b08, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0104.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0104.900] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7f30 [0104.900] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.900] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0104.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0104.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0104.901] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7f30 [0104.901] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.901] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.901] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.901] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.901] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.901] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.901] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.901] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.901] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.901] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.902] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.902] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.902] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0104.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\0r-uDW4THkIUpl-oRh_.odt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\0r-udw4thkiupl-orh_.odt.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee8c | out: lpFileInformation=0x119ee8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7031e5bf, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7031e5bf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7031e5bf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x17ba0)) returned 1 [0104.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee74) returned 1 [0104.902] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\0r-uDW4THkIUpl-oRh_.odt.Lime", lpFindFileData=0x119eb9c | out: lpFindFileData=0x119eb9c) returned 0x15f7f30 [0104.902] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebac | out: lpFindFileData=0x119ebac) returned 0 [0104.902] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0104.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee34) returned 1 [0104.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee40) returned 1 [0104.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee48) returned 1 [0104.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\0r-uDW4THkIUpl-oRh_.odt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\0r-udw4thkiupl-orh_.odt.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eec4 | out: lpFileInformation=0x119eec4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7031e5bf, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7031e5bf, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7031e5bf, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x17ba0)) returned 1 [0104.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee44) returned 1 [0104.903] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\0r-uDW4THkIUpl-oRh_.odt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\0r-udw4thkiupl-orh_.odt.lime")) returned 1 [0104.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0104.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bda9b08, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bda9b08, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0104.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0104.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bda9b08, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bda9b08, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0104.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0104.904] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7f30 [0104.904] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.904] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0104.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0104.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0104.904] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7f30 [0104.905] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.905] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.905] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.905] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.905] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.905] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.905] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.905] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.905] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.905] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.905] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.905] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0104.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0104.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bda9b08, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bda9b08, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0104.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0104.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bda9b08, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bda9b08, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0104.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0104.906] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7f30 [0104.906] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.906] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0104.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0104.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0104.906] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7f30 [0104.907] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.907] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.907] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.907] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.907] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.907] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.907] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.907] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.907] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.907] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.908] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.908] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0104.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.908] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.908] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.908] GetSystemMetrics (nIndex=42) returned 0 [0104.908] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.908] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0104.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0104.908] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\b37k-lfrwivyw.pps.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.908] GetFileType (hFile=0x298) returned 0x1 [0104.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0104.908] GetFileType (hFile=0x298) returned 0x1 [0104.908] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119eed4 | out: lpFileSizeHigh=0x119eed4*=0x0) returned 0x66f0 [0104.908] ReadFile (in: hFile=0x298, lpBuffer=0x3046a34, nNumberOfBytesToRead=0x66f0, lpNumberOfBytesRead=0x119ee80, lpOverlapped=0x0 | out: lpBuffer=0x3046a34*, lpNumberOfBytesRead=0x119ee80*=0x66f0, lpOverlapped=0x0) returned 1 [0104.909] CloseHandle (hObject=0x298) returned 1 [0104.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps", lpFilePart=0x0) returned 0x3d [0104.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb8) returned 1 [0104.911] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\b37k-lfrwivyw.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.911] GetFileType (hFile=0x298) returned 0x1 [0104.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb4) returned 1 [0104.911] GetFileType (hFile=0x298) returned 0x1 [0104.911] WriteFile (in: hFile=0x298, lpBuffer=0x3054094*, nNumberOfBytesToWrite=0x66e8, lpNumberOfBytesWritten=0x119ee70, lpOverlapped=0x0 | out: lpBuffer=0x3054094*, lpNumberOfBytesWritten=0x119ee70*=0x66e8, lpOverlapped=0x0) returned 1 [0104.912] CloseHandle (hObject=0x298) returned 1 [0104.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0104.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdcfd0f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdcfd0f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0104.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0104.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdcfd0f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdcfd0f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0104.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0104.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.914] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.914] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7830 [0104.914] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.914] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0104.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0104.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.914] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7830 [0104.914] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.914] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.914] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.914] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.915] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.915] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.915] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.915] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.915] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.915] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.915] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.915] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.915] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e9cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", lpFilePart=0x0) returned 0x42 [0104.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", lpFilePart=0x0) returned 0x42 [0104.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e968, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", lpFilePart=0x0) returned 0x42 [0104.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", lpFilePart=0x0) returned 0x42 [0104.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\b37k-lfrwivyw.pps.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee8c | out: lpFileInformation=0x119ee8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70344b3a, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70344b3a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70344b3a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x66f0)) returned 1 [0104.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee74) returned 1 [0104.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e95c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", lpFilePart=0x0) returned 0x42 [0104.916] GetFullPathNameW (in: lpFileName="B37K-LfrWIVyw.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\B37K-LfrWIVyw.pps.Lime", lpFilePart=0x0) returned 0x33 [0104.916] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", lpFindFileData=0x119eb9c | out: lpFindFileData=0x119eb9c) returned 0x15f7830 [0104.916] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebac | out: lpFindFileData=0x119ebac) returned 0 [0104.916] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee34) returned 1 [0104.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee40) returned 1 [0104.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e924, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", lpFilePart=0x0) returned 0x42 [0104.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", lpFilePart=0x0) returned 0x42 [0104.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e9c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", lpFilePart=0x0) returned 0x42 [0104.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee48) returned 1 [0104.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\b37k-lfrwivyw.pps.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eec4 | out: lpFileInformation=0x119eec4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70344b3a, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70344b3a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70344b3a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x66f0)) returned 1 [0104.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee44) returned 1 [0104.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime", lpFilePart=0x0) returned 0x42 [0104.916] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\B37K-LfrWIVyw.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\b37k-lfrwivyw.pps.lime")) returned 1 [0104.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0104.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdcfd0f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdcfd0f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0104.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0104.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdcfd0f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdcfd0f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0104.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0104.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.918] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.918] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7830 [0104.918] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.918] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0104.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0104.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.918] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7830 [0104.918] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.918] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.918] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.918] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.919] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.919] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.919] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.919] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.919] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.919] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.919] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.919] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0104.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdcfd0f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdcfd0f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0104.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0104.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdcfd0f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdcfd0f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0104.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0104.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.920] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.920] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7830 [0104.920] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.920] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0104.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0104.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.920] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7830 [0104.920] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.920] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.921] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.921] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.921] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.921] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.921] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.921] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.921] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.921] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.921] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.921] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.921] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.921] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.921] GetSystemMetrics (nIndex=42) returned 0 [0104.921] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.921] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0104.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", lpFilePart=0x0) returned 0x41 [0104.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0104.922] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ghgjaavctako.odp.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.922] GetFileType (hFile=0x298) returned 0x1 [0104.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0104.922] GetFileType (hFile=0x298) returned 0x1 [0104.922] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119eed4 | out: lpFileSizeHigh=0x119eed4*=0x0) returned 0x1470 [0104.922] ReadFile (in: hFile=0x298, lpBuffer=0x3067aac, nNumberOfBytesToRead=0x1470, lpNumberOfBytesRead=0x119ee80, lpOverlapped=0x0 | out: lpBuffer=0x3067aac*, lpNumberOfBytesRead=0x119ee80*=0x1470, lpOverlapped=0x0) returned 1 [0104.923] CloseHandle (hObject=0x298) returned 1 [0104.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp", lpFilePart=0x0) returned 0x3c [0104.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb8) returned 1 [0104.923] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ghgjaavctako.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.923] GetFileType (hFile=0x298) returned 0x1 [0104.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb4) returned 1 [0104.923] GetFileType (hFile=0x298) returned 0x1 [0104.924] WriteFile (in: hFile=0x298, lpBuffer=0x306ac0c*, nNumberOfBytesToWrite=0x1465, lpNumberOfBytesWritten=0x119ee70, lpOverlapped=0x0 | out: lpBuffer=0x306ac0c*, lpNumberOfBytesWritten=0x119ee70*=0x1465, lpOverlapped=0x0) returned 1 [0104.924] CloseHandle (hObject=0x298) returned 1 [0104.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0104.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdcfd0f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdcfd0f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0104.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0104.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdcfd0f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdcfd0f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0104.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0104.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.925] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.925] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7230 [0104.925] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.925] FindClose (in: hFindFile=0x15f7230 | out: hFindFile=0x15f7230) returned 1 [0104.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0104.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0104.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0104.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.926] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7430 [0104.926] FindNextFileW (in: hFindFile=0x15f7430, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.926] FindNextFileW (in: hFindFile=0x15f7430, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.926] FindNextFileW (in: hFindFile=0x15f7430, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.926] FindNextFileW (in: hFindFile=0x15f7430, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.926] FindNextFileW (in: hFindFile=0x15f7430, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.926] FindNextFileW (in: hFindFile=0x15f7430, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.926] FindNextFileW (in: hFindFile=0x15f7430, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.926] FindNextFileW (in: hFindFile=0x15f7430, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.926] FindNextFileW (in: hFindFile=0x15f7430, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.926] FindNextFileW (in: hFindFile=0x15f7430, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.927] FindNextFileW (in: hFindFile=0x15f7430, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.927] FindNextFileW (in: hFindFile=0x15f7430, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.927] FindClose (in: hFindFile=0x15f7430 | out: hFindFile=0x15f7430) returned 1 [0104.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0104.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0104.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", nBufferLength=0x105, lpBuffer=0x119e9cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", lpFilePart=0x0) returned 0x41 [0104.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", lpFilePart=0x0) returned 0x41 [0104.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", nBufferLength=0x105, lpBuffer=0x119e968, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", lpFilePart=0x0) returned 0x41 [0104.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", nBufferLength=0x105, lpBuffer=0x119e990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", lpFilePart=0x0) returned 0x41 [0104.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0104.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ghgjaavctako.odp.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee8c | out: lpFileInformation=0x119ee8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7036aafa, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7036aafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7036aafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1470)) returned 1 [0104.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0104.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e95c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", lpFilePart=0x0) returned 0x41 [0104.927] GetFullPathNameW (in: lpFileName="ghGjaAvcTAKO.odp.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\ghGjaAvcTAKO.odp.Lime", lpFilePart=0x0) returned 0x32 [0104.927] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", lpFindFileData=0x119eb9c | out: lpFindFileData=0x119eb9c) returned 0x15f7670 [0104.927] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119ebac | out: lpFindFileData=0x119ebac) returned 0 [0104.927] FindClose (in: hFindFile=0x15f7670 | out: hFindFile=0x15f7670) returned 1 [0104.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", nBufferLength=0x105, lpBuffer=0x119e924, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", lpFilePart=0x0) returned 0x41 [0104.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", lpFilePart=0x0) returned 0x41 [0104.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", nBufferLength=0x105, lpBuffer=0x119e9c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", lpFilePart=0x0) returned 0x41 [0104.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ghgjaavctako.odp.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eec4 | out: lpFileInformation=0x119eec4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7036aafa, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7036aafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7036aafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1470)) returned 1 [0104.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime", lpFilePart=0x0) returned 0x41 [0104.928] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\ghGjaAvcTAKO.odp.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ghgjaavctako.odp.lime")) returned 1 [0104.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdf5fc5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdf5fc5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdf5fc5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdf5fc5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.929] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.929] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7230 [0104.929] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.929] FindClose (in: hFindFile=0x15f7230 | out: hFindFile=0x15f7230) returned 1 [0104.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.929] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f75b0 [0104.929] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.929] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.929] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.929] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.929] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.930] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.930] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.930] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.930] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.930] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.930] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.930] FindClose (in: hFindFile=0x15f75b0 | out: hFindFile=0x15f75b0) returned 1 [0104.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdf5fc5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdf5fc5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdf5fc5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdf5fc5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.930] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.930] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f74b0 [0104.931] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.931] FindClose (in: hFindFile=0x15f74b0 | out: hFindFile=0x15f74b0) returned 1 [0104.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.931] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7070 [0104.931] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.931] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.931] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.931] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.931] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.931] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.932] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.932] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.932] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.932] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.932] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.932] FindClose (in: hFindFile=0x15f7070 | out: hFindFile=0x15f7070) returned 1 [0104.932] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.932] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.932] GetSystemMetrics (nIndex=42) returned 0 [0104.932] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.932] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0104.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", lpFilePart=0x0) returned 0x3a [0104.932] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\miqzp.pps.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.932] GetFileType (hFile=0x298) returned 0x1 [0104.932] GetFileType (hFile=0x298) returned 0x1 [0104.932] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119eed4 | out: lpFileSizeHigh=0x119eed4*=0x0) returned 0x890 [0104.932] ReadFile (in: hFile=0x298, lpBuffer=0x3079b74, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119ee80, lpOverlapped=0x0 | out: lpBuffer=0x3079b74*, lpNumberOfBytesRead=0x119ee80*=0x890, lpOverlapped=0x0) returned 1 [0104.933] CloseHandle (hObject=0x298) returned 1 [0104.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps", lpFilePart=0x0) returned 0x35 [0104.934] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\miqzp.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.934] GetFileType (hFile=0x298) returned 0x1 [0104.934] GetFileType (hFile=0x298) returned 0x1 [0104.934] WriteFile (in: hFile=0x298, lpBuffer=0x307c624*, nNumberOfBytesToWrite=0x88e, lpNumberOfBytesWritten=0x119ee44, lpOverlapped=0x0 | out: lpBuffer=0x307c624*, lpNumberOfBytesWritten=0x119ee44*=0x88e, lpOverlapped=0x0) returned 1 [0104.935] CloseHandle (hObject=0x298) returned 1 [0104.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdf5fc5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdf5fc5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdf5fc5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdf5fc5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.936] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.936] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7230 [0104.936] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.936] FindClose (in: hFindFile=0x15f7230 | out: hFindFile=0x15f7230) returned 1 [0104.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.936] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7730 [0104.936] FindNextFileW (in: hFindFile=0x15f7730, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.936] FindNextFileW (in: hFindFile=0x15f7730, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.936] FindNextFileW (in: hFindFile=0x15f7730, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.936] FindNextFileW (in: hFindFile=0x15f7730, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.936] FindNextFileW (in: hFindFile=0x15f7730, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.936] FindNextFileW (in: hFindFile=0x15f7730, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.937] FindNextFileW (in: hFindFile=0x15f7730, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.937] FindNextFileW (in: hFindFile=0x15f7730, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.937] FindNextFileW (in: hFindFile=0x15f7730, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.937] FindNextFileW (in: hFindFile=0x15f7730, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.937] FindNextFileW (in: hFindFile=0x15f7730, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.937] FindNextFileW (in: hFindFile=0x15f7730, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.937] FindClose (in: hFindFile=0x15f7730 | out: hFindFile=0x15f7730) returned 1 [0104.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e9cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", lpFilePart=0x0) returned 0x3a [0104.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", lpFilePart=0x0) returned 0x3a [0104.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e968, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", lpFilePart=0x0) returned 0x3a [0104.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", lpFilePart=0x0) returned 0x3a [0104.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\miqzp.pps.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee8c | out: lpFileInformation=0x119ee8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7036aafa, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7036aafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7036aafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x890)) returned 1 [0104.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e95c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", lpFilePart=0x0) returned 0x3a [0104.937] GetFullPathNameW (in: lpFileName="MIQzp.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\MIQzp.pps.Lime", lpFilePart=0x0) returned 0x2b [0104.937] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", lpFindFileData=0x119eb9c | out: lpFindFileData=0x119eb9c) returned 0x15f74b0 [0104.938] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ebac | out: lpFindFileData=0x119ebac) returned 0 [0104.938] FindClose (in: hFindFile=0x15f74b0 | out: hFindFile=0x15f74b0) returned 1 [0104.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e924, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", lpFilePart=0x0) returned 0x3a [0104.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", lpFilePart=0x0) returned 0x3a [0104.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e9c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", lpFilePart=0x0) returned 0x3a [0104.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\miqzp.pps.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eec4 | out: lpFileInformation=0x119eec4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7036aafa, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7036aafa, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7036aafa, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x890)) returned 1 [0104.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime", lpFilePart=0x0) returned 0x3a [0104.938] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\MIQzp.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\miqzp.pps.lime")) returned 1 [0104.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdf5fc5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdf5fc5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdf5fc5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdf5fc5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.939] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.939] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7330 [0104.939] FindNextFileW (in: hFindFile=0x15f7330, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.939] FindClose (in: hFindFile=0x15f7330 | out: hFindFile=0x15f7330) returned 1 [0104.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.939] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7330 [0104.939] FindNextFileW (in: hFindFile=0x15f7330, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.940] FindNextFileW (in: hFindFile=0x15f7330, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.940] FindNextFileW (in: hFindFile=0x15f7330, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.940] FindNextFileW (in: hFindFile=0x15f7330, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.940] FindNextFileW (in: hFindFile=0x15f7330, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.940] FindNextFileW (in: hFindFile=0x15f7330, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.940] FindNextFileW (in: hFindFile=0x15f7330, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.940] FindNextFileW (in: hFindFile=0x15f7330, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.940] FindNextFileW (in: hFindFile=0x15f7330, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.940] FindNextFileW (in: hFindFile=0x15f7330, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.940] FindNextFileW (in: hFindFile=0x15f7330, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.940] FindClose (in: hFindFile=0x15f7330 | out: hFindFile=0x15f7330) returned 1 [0104.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdf5fc5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdf5fc5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9bdf5fc5, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bdf5fc5, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.941] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.941] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f75f0 [0104.941] FindNextFileW (in: hFindFile=0x15f75f0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.941] FindClose (in: hFindFile=0x15f75f0 | out: hFindFile=0x15f75f0) returned 1 [0104.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.941] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7530 [0104.941] FindNextFileW (in: hFindFile=0x15f7530, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.941] FindNextFileW (in: hFindFile=0x15f7530, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.941] FindNextFileW (in: hFindFile=0x15f7530, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.942] FindNextFileW (in: hFindFile=0x15f7530, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.942] FindNextFileW (in: hFindFile=0x15f7530, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.942] FindNextFileW (in: hFindFile=0x15f7530, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.942] FindNextFileW (in: hFindFile=0x15f7530, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.942] FindNextFileW (in: hFindFile=0x15f7530, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.942] FindNextFileW (in: hFindFile=0x15f7530, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.943] FindNextFileW (in: hFindFile=0x15f7530, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.943] FindNextFileW (in: hFindFile=0x15f7530, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.943] FindClose (in: hFindFile=0x15f7530 | out: hFindFile=0x15f7530) returned 1 [0104.943] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.943] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.943] GetSystemMetrics (nIndex=42) returned 0 [0104.943] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.943] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0104.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", lpFilePart=0x0) returned 0x41 [0104.943] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\sjkbeubnh7w9.doc.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.943] GetFileType (hFile=0x298) returned 0x1 [0104.943] GetFileType (hFile=0x298) returned 0x1 [0104.943] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119eed4 | out: lpFileSizeHigh=0x119eed4*=0x0) returned 0x12e40 [0104.943] ReadFile (in: hFile=0x298, lpBuffer=0x308a534, nNumberOfBytesToRead=0x12e40, lpNumberOfBytesRead=0x119ee80, lpOverlapped=0x0 | out: lpBuffer=0x308a534*, lpNumberOfBytesRead=0x119ee80*=0x12e40, lpOverlapped=0x0) returned 1 [0104.944] CloseHandle (hObject=0x298) returned 1 [0104.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc", lpFilePart=0x0) returned 0x3c [0104.947] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\sjkbeubnh7w9.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.947] GetFileType (hFile=0x298) returned 0x1 [0104.947] GetFileType (hFile=0x298) returned 0x1 [0104.947] WriteFile (in: hFile=0x298, lpBuffer=0x30b0a34*, nNumberOfBytesToWrite=0x12e30, lpNumberOfBytesWritten=0x119ee70, lpOverlapped=0x0 | out: lpBuffer=0x30b0a34*, lpNumberOfBytesWritten=0x119ee70*=0x12e30, lpOverlapped=0x0) returned 1 [0104.948] CloseHandle (hObject=0x298) returned 1 [0104.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9be1c235, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9be1c235, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9be1c235, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9be1c235, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.950] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.950] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7130 [0104.950] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.950] FindClose (in: hFindFile=0x15f7130 | out: hFindFile=0x15f7130) returned 1 [0104.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.950] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f72b0 [0104.950] FindNextFileW (in: hFindFile=0x15f72b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.950] FindNextFileW (in: hFindFile=0x15f72b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.950] FindNextFileW (in: hFindFile=0x15f72b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.950] FindNextFileW (in: hFindFile=0x15f72b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.950] FindNextFileW (in: hFindFile=0x15f72b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.951] FindNextFileW (in: hFindFile=0x15f72b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.951] FindNextFileW (in: hFindFile=0x15f72b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.951] FindNextFileW (in: hFindFile=0x15f72b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.951] FindNextFileW (in: hFindFile=0x15f72b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.951] FindNextFileW (in: hFindFile=0x15f72b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.951] FindNextFileW (in: hFindFile=0x15f72b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.951] FindNextFileW (in: hFindFile=0x15f72b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.951] FindClose (in: hFindFile=0x15f72b0 | out: hFindFile=0x15f72b0) returned 1 [0104.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", nBufferLength=0x105, lpBuffer=0x119e9cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", lpFilePart=0x0) returned 0x41 [0104.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", lpFilePart=0x0) returned 0x41 [0104.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", nBufferLength=0x105, lpBuffer=0x119e968, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", lpFilePart=0x0) returned 0x41 [0104.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", nBufferLength=0x105, lpBuffer=0x119e990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", lpFilePart=0x0) returned 0x41 [0104.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\sjkbeubnh7w9.doc.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee8c | out: lpFileInformation=0x119ee8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70390e5e, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70390e5e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70390e5e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x12e40)) returned 1 [0104.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e95c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", lpFilePart=0x0) returned 0x41 [0104.951] GetFullPathNameW (in: lpFileName="sJKbeUBnH7w9.doc.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\sJKbeUBnH7w9.doc.Lime", lpFilePart=0x0) returned 0x32 [0104.951] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", lpFindFileData=0x119eb9c | out: lpFindFileData=0x119eb9c) returned 0x15f6fb0 [0104.952] FindNextFileW (in: hFindFile=0x15f6fb0, lpFindFileData=0x119ebac | out: lpFindFileData=0x119ebac) returned 0 [0104.952] FindClose (in: hFindFile=0x15f6fb0 | out: hFindFile=0x15f6fb0) returned 1 [0104.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", nBufferLength=0x105, lpBuffer=0x119e924, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", lpFilePart=0x0) returned 0x41 [0104.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", lpFilePart=0x0) returned 0x41 [0104.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", nBufferLength=0x105, lpBuffer=0x119e9c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", lpFilePart=0x0) returned 0x41 [0104.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\sjkbeubnh7w9.doc.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eec4 | out: lpFileInformation=0x119eec4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70390e5e, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70390e5e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70390e5e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x12e40)) returned 1 [0104.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime", lpFilePart=0x0) returned 0x41 [0104.952] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\sJKbeUBnH7w9.doc.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\sjkbeubnh7w9.doc.lime")) returned 1 [0104.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9be1c235, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9be1c235, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9be1c235, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9be1c235, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.953] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.953] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7170 [0104.953] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.953] FindClose (in: hFindFile=0x15f7170 | out: hFindFile=0x15f7170) returned 1 [0104.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.954] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7030 [0104.954] FindNextFileW (in: hFindFile=0x15f7030, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.954] FindNextFileW (in: hFindFile=0x15f7030, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.954] FindNextFileW (in: hFindFile=0x15f7030, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.954] FindNextFileW (in: hFindFile=0x15f7030, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.954] FindNextFileW (in: hFindFile=0x15f7030, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.954] FindNextFileW (in: hFindFile=0x15f7030, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.954] FindNextFileW (in: hFindFile=0x15f7030, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.954] FindNextFileW (in: hFindFile=0x15f7030, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.954] FindNextFileW (in: hFindFile=0x15f7030, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.954] FindNextFileW (in: hFindFile=0x15f7030, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.954] FindNextFileW (in: hFindFile=0x15f7030, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.954] FindClose (in: hFindFile=0x15f7030 | out: hFindFile=0x15f7030) returned 1 [0104.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9be1c235, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9be1c235, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9be1c235, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9be1c235, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.955] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.955] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f76b0 [0104.955] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.955] FindClose (in: hFindFile=0x15f76b0 | out: hFindFile=0x15f76b0) returned 1 [0104.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.955] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f76b0 [0104.955] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.955] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.955] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.955] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.955] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.955] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.955] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.955] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.956] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.956] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.956] FindNextFileW (in: hFindFile=0x15f76b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.956] FindClose (in: hFindFile=0x15f76b0 | out: hFindFile=0x15f76b0) returned 1 [0104.956] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.956] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.956] GetSystemMetrics (nIndex=42) returned 0 [0104.956] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.956] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0104.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", lpFilePart=0x0) returned 0x44 [0104.956] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\sqfvqa7ma39tieo.pps.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.956] GetFileType (hFile=0x298) returned 0x1 [0104.956] GetFileType (hFile=0x298) returned 0x1 [0104.956] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119eed4 | out: lpFileSizeHigh=0x119eed4*=0x0) returned 0x6570 [0104.956] ReadFile (in: hFile=0x298, lpBuffer=0x30d09c4, nNumberOfBytesToRead=0x6570, lpNumberOfBytesRead=0x119ee80, lpOverlapped=0x0 | out: lpBuffer=0x30d09c4*, lpNumberOfBytesRead=0x119ee80*=0x6570, lpOverlapped=0x0) returned 1 [0104.958] CloseHandle (hObject=0x298) returned 1 [0104.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps", lpFilePart=0x0) returned 0x3f [0104.961] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\sqfvqa7ma39tieo.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0104.961] GetFileType (hFile=0x298) returned 0x1 [0104.961] GetFileType (hFile=0x298) returned 0x1 [0104.961] WriteFile (in: hFile=0x298, lpBuffer=0x2ed6784*, nNumberOfBytesToWrite=0x656d, lpNumberOfBytesWritten=0x119ee70, lpOverlapped=0x0 | out: lpBuffer=0x2ed6784*, lpNumberOfBytesWritten=0x119ee70*=0x656d, lpOverlapped=0x0) returned 1 [0104.962] CloseHandle (hObject=0x298) returned 1 [0104.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9be42464, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9be42464, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9be42464, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9be42464, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.963] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.963] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7df0 [0104.964] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.964] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.964] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7df0 [0104.964] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.964] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.964] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.964] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.964] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.964] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.964] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.964] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.964] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.964] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.964] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.964] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.964] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0104.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e9cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", lpFilePart=0x0) returned 0x44 [0104.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", lpFilePart=0x0) returned 0x44 [0104.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e968, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", lpFilePart=0x0) returned 0x44 [0104.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", lpFilePart=0x0) returned 0x44 [0104.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\sqfvqa7ma39tieo.pps.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee8c | out: lpFileInformation=0x119ee8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70390e5e, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70390e5e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70390e5e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x6570)) returned 1 [0104.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e95c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", lpFilePart=0x0) returned 0x44 [0104.964] GetFullPathNameW (in: lpFileName="SqfVqA7Ma39tIEO.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\SqfVqA7Ma39tIEO.pps.Lime", lpFilePart=0x0) returned 0x35 [0104.965] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", lpFindFileData=0x119eb9c | out: lpFindFileData=0x119eb9c) returned 0x15f7bb0 [0104.965] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebac | out: lpFindFileData=0x119ebac) returned 0 [0104.965] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0104.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e924, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", lpFilePart=0x0) returned 0x44 [0104.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", lpFilePart=0x0) returned 0x44 [0104.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e9c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", lpFilePart=0x0) returned 0x44 [0104.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\sqfvqa7ma39tieo.pps.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eec4 | out: lpFileInformation=0x119eec4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70390e5e, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70390e5e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70390e5e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x6570)) returned 1 [0104.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime", lpFilePart=0x0) returned 0x44 [0104.965] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\SqfVqA7Ma39tIEO.pps.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\sqfvqa7ma39tieo.pps.lime")) returned 1 [0104.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9be42464, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9be42464, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9be42464, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9be42464, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.966] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.966] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7bb0 [0104.966] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.966] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0104.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.967] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7bb0 [0104.967] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.967] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.967] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.967] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.967] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.967] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.967] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.967] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.967] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.967] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.967] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.967] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0104.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9be42464, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9be42464, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x880e27d0, ftCreationTime.dwHighDateTime=0x1d35722, ftLastAccessTime.dwLowDateTime=0x9be42464, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9be42464, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0104.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0104.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.967] GetFullPathNameW (in: lpFileName="KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\KaaOrNRraztX", lpFilePart=0x0) returned 0x29 [0104.967] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7e30 [0104.968] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0104.968] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0104.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX", lpFilePart=0x0) returned 0x2b [0104.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\", lpFilePart=0x0) returned 0x2c [0104.968] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7830 [0104.968] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.968] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.968] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.968] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.968] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.968] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.968] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.968] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.968] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.968] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0104.968] FindNextFileW (in: hFindFile=0x15f7830, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0104.968] FindClose (in: hFindFile=0x15f7830 | out: hFindFile=0x15f7830) returned 1 [0104.968] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.968] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.968] GetSystemMetrics (nIndex=42) returned 0 [0104.968] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.968] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0104.979] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.979] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.979] GetSystemMetrics (nIndex=42) returned 0 [0104.979] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.979] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0104.984] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.984] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.984] GetSystemMetrics (nIndex=42) returned 0 [0104.984] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.985] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0104.990] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.990] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.990] GetSystemMetrics (nIndex=42) returned 0 [0104.990] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.990] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0104.995] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0104.995] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0104.995] GetSystemMetrics (nIndex=42) returned 0 [0104.995] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0104.995] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.001] FindNextFileW (in: hFindFile=0x15f7c30, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.001] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.001] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.001] GetSystemMetrics (nIndex=42) returned 0 [0105.001] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.001] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.007] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.007] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.007] GetSystemMetrics (nIndex=42) returned 0 [0105.007] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.007] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.011] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.011] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.011] GetSystemMetrics (nIndex=42) returned 0 [0105.011] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.011] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.016] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.016] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.016] GetSystemMetrics (nIndex=42) returned 0 [0105.016] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.016] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.020] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.020] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.020] GetSystemMetrics (nIndex=42) returned 0 [0105.020] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ed9c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.020] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ed9c) returned 0x32 [0105.026] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.026] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.026] GetSystemMetrics (nIndex=42) returned 0 [0105.026] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ed9c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.026] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ed9c) returned 0x32 [0105.031] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.031] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.031] GetSystemMetrics (nIndex=42) returned 0 [0105.031] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ed9c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.031] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ed9c) returned 0x32 [0105.037] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.037] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.037] GetSystemMetrics (nIndex=42) returned 0 [0105.037] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ed9c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.037] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ed9c) returned 0x32 [0105.045] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.045] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.045] GetSystemMetrics (nIndex=42) returned 0 [0105.045] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ed5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.045] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ed5c) returned 0x32 [0105.050] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.050] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.050] GetSystemMetrics (nIndex=42) returned 0 [0105.050] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ed5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.050] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ed5c) returned 0x32 [0105.053] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\lKSFxnySxlvz37R4o.ppt" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\lksfxnysxlvz37r4o.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0105.053] GetFileType (hFile=0x298) returned 0x1 [0105.053] GetFileType (hFile=0x298) returned 0x1 [0105.053] WriteFile (in: hFile=0x298, lpBuffer=0x2fc3700*, nNumberOfBytesToWrite=0xc90f, lpNumberOfBytesWritten=0x119edb0, lpOverlapped=0x0 | out: lpBuffer=0x2fc3700*, lpNumberOfBytesWritten=0x119edb0*=0xc90f, lpOverlapped=0x0) returned 1 [0105.054] CloseHandle (hObject=0x298) returned 1 [0105.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x119edb0 | out: lpFileInformation=0x119edb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x9bf27593, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bf27593, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x119eda4 | out: lpFileInformation=0x119eda4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x9bf27593, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bf27593, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.056] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFindFileData=0x119eac0 | out: lpFindFileData=0x119eac0) returned 0x15f7c30 [0105.057] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\*", lpFindFileData=0x119eaf4 | out: lpFindFileData=0x119eaf4) returned 0x15f7c30 [0105.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\lKSFxnySxlvz37R4o.ppt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\lksfxnysxlvz37r4o.ppt.lime"), fInfoLevelId=0x0, lpFileInformation=0x119edcc | out: lpFileInformation=0x119edcc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7049bd75, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7049bd75, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7049bd75, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0xc910)) returned 1 [0105.057] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\lKSFxnySxlvz37R4o.ppt.Lime", lpFindFileData=0x119eadc | out: lpFindFileData=0x119eadc) returned 0x15f7c30 [0105.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\lKSFxnySxlvz37R4o.ppt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\lksfxnysxlvz37r4o.ppt.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee04 | out: lpFileInformation=0x119ee04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7049bd75, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7049bd75, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7049bd75, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0xc910)) returned 1 [0105.058] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\lKSFxnySxlvz37R4o.ppt.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\lksfxnysxlvz37r4o.ppt.lime")) returned 1 [0105.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x119edb0 | out: lpFileInformation=0x119edb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x9bf27593, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bf27593, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x119eda4 | out: lpFileInformation=0x119eda4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x9bf27593, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bf27593, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.059] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFindFileData=0x119eac0 | out: lpFindFileData=0x119eac0) returned 0x15f7c30 [0105.059] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\*", lpFindFileData=0x119eaf4 | out: lpFindFileData=0x119eaf4) returned 0x15f7c30 [0105.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x119edb0 | out: lpFileInformation=0x119edb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x9bf27593, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bf27593, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x119eda4 | out: lpFileInformation=0x119eda4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x9bf27593, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bf27593, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.060] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFindFileData=0x119eac0 | out: lpFindFileData=0x119eac0) returned 0x15f7c30 [0105.060] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\*", lpFindFileData=0x119eaf4 | out: lpFindFileData=0x119eaf4) returned 0x15f7c30 [0105.061] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.061] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.061] GetSystemMetrics (nIndex=42) returned 0 [0105.061] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ed5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.061] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ed5c) returned 0x32 [0105.061] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\pvdit6.pdf.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0105.061] GetFileType (hFile=0x298) returned 0x1 [0105.061] GetFileType (hFile=0x298) returned 0x1 [0105.061] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119ee14 | out: lpFileSizeHigh=0x119ee14*=0x0) returned 0x9e10 [0105.061] ReadFile (in: hFile=0x298, lpBuffer=0x2fdfa70, nNumberOfBytesToRead=0x9e10, lpNumberOfBytesRead=0x119edc0, lpOverlapped=0x0 | out: lpBuffer=0x2fdfa70*, lpNumberOfBytesRead=0x119edc0*=0x9e10, lpOverlapped=0x0) returned 1 [0105.062] CloseHandle (hObject=0x298) returned 1 [0105.063] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\pvdit6.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0105.064] GetFileType (hFile=0x298) returned 0x1 [0105.064] GetFileType (hFile=0x298) returned 0x1 [0105.064] WriteFile (in: hFile=0x298, lpBuffer=0x2ff3f58*, nNumberOfBytesToWrite=0x9e06, lpNumberOfBytesWritten=0x119edb0, lpOverlapped=0x0 | out: lpBuffer=0x2ff3f58*, lpNumberOfBytesWritten=0x119edb0*=0x9e06, lpOverlapped=0x0) returned 1 [0105.064] CloseHandle (hObject=0x298) returned 1 [0105.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x119edb0 | out: lpFileInformation=0x119edb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x9bf27593, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bf27593, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x119eda4 | out: lpFileInformation=0x119eda4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x9bf27593, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bf27593, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.066] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFindFileData=0x119eac0 | out: lpFindFileData=0x119eac0) returned 0x15f7cb0 [0105.066] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\*", lpFindFileData=0x119eaf4 | out: lpFindFileData=0x119eaf4) returned 0x15f7cb0 [0105.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\pvdit6.pdf.lime"), fInfoLevelId=0x0, lpFileInformation=0x119edcc | out: lpFileInformation=0x119edcc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7049bd75, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7049bd75, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7049bd75, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x9e10)) returned 1 [0105.067] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf.Lime", lpFindFileData=0x119eadc | out: lpFindFileData=0x119eadc) returned 0x15f7e30 [0105.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\pvdit6.pdf.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee04 | out: lpFileInformation=0x119ee04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7049bd75, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7049bd75, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7049bd75, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x9e10)) returned 1 [0105.068] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\pvDIt6.pdf.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7\\pvdit6.pdf.lime")) returned 1 [0105.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x119edb0 | out: lpFileInformation=0x119edb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x9bf4d47d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bf4d47d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x119eda4 | out: lpFileInformation=0x119eda4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x9bf4d47d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bf4d47d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.069] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7", lpFindFileData=0x119eac0 | out: lpFindFileData=0x119eac0) returned 0x15f7e30 [0105.069] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7\\*", lpFindFileData=0x119eaf4 | out: lpFindFileData=0x119eaf4) returned 0x15f7e70 [0105.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x119edb0 | out: lpFileInformation=0x119edb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x9bf4d47d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bf4d47d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\KaaOrNRraztX\\AO-nFf kn\\BWmJPNLUzWsoVW5iDA\\hDVR7Lfi7YE7" (normalized: "c:\\users\\5jghkoaofdp\\documents\\kaaornrraztx\\ao-nff kn\\bwmjpnluzwsovw5ida\\hdvr7lfi7ye7"), fInfoLevelId=0x0, lpFileInformation=0x119eda4 | out: lpFileInformation=0x119eda4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc229cb90, ftCreationTime.dwHighDateTime=0x1d35614, ftLastAccessTime.dwLowDateTime=0x9bf4d47d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bf4d47d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.070] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.070] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.071] GetSystemMetrics (nIndex=42) returned 0 [0105.071] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ed5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.071] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ed5c) returned 0x32 [0105.078] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.078] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.078] GetSystemMetrics (nIndex=42) returned 0 [0105.078] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ed5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.078] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ed5c) returned 0x32 [0105.082] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.082] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.082] GetSystemMetrics (nIndex=42) returned 0 [0105.082] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.082] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.087] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.087] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.087] GetSystemMetrics (nIndex=42) returned 0 [0105.087] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.087] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0105.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.093] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0105.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0105.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee00) returned 1 [0105.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee08) returned 1 [0105.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee04) returned 1 [0105.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.094] FindClose (in: hFindFile=0x15f7c30 | out: hFindFile=0x15f7c30) returned 1 [0105.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.095] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0105.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.096] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.096] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.096] GetSystemMetrics (nIndex=42) returned 0 [0105.096] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.096] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed90) returned 1 [0105.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed8c) returned 1 [0105.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed78) returned 1 [0105.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed74) returned 1 [0105.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.099] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0105.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0105.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.100] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0105.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0105.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee00) returned 1 [0105.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee08) returned 1 [0105.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee04) returned 1 [0105.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.101] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.102] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0105.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.102] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.102] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.102] GetSystemMetrics (nIndex=42) returned 0 [0105.103] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.103] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed90) returned 1 [0105.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed8c) returned 1 [0105.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed78) returned 1 [0105.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed74) returned 1 [0105.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.106] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0105.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0105.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.107] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0105.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0105.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee00) returned 1 [0105.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee08) returned 1 [0105.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee04) returned 1 [0105.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.109] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0105.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.109] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0105.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.109] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0105.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.110] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0105.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0105.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0105.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0105.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0105.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0105.110] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0105.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0105.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0105.111] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0105.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0105.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0105.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0105.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0105.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0105.112] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0105.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0105.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0105.113] FindClose (in: hFindFile=0x15f7e70 | out: hFindFile=0x15f7e70) returned 1 [0105.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0105.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0105.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0105.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0105.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0105.114] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0105.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0105.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0105.114] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0105.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.115] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.115] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.115] GetSystemMetrics (nIndex=42) returned 0 [0105.115] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ed9c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.115] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ed9c) returned 0x32 [0105.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed50) returned 1 [0105.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed4c) returned 1 [0105.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed38) returned 1 [0105.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed34) returned 1 [0105.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0105.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0105.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0105.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0105.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0105.118] FindClose (in: hFindFile=0x15f7bf0 | out: hFindFile=0x15f7bf0) returned 1 [0105.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0105.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0105.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed90) returned 1 [0105.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed8c) returned 1 [0105.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb4) returned 1 [0105.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edc0) returned 1 [0105.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edc8) returned 1 [0105.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edc4) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0105.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.121] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.121] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.121] GetSystemMetrics (nIndex=42) returned 0 [0105.121] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ed9c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.121] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ed9c) returned 0x32 [0105.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed50) returned 1 [0105.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed4c) returned 1 [0105.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed38) returned 1 [0105.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed34) returned 1 [0105.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0105.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0105.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0105.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0105.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0105.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0105.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0105.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed90) returned 1 [0105.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed8c) returned 1 [0105.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb4) returned 1 [0105.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edc0) returned 1 [0105.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edc8) returned 1 [0105.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edc4) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0105.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.127] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.127] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.127] GetSystemMetrics (nIndex=42) returned 0 [0105.127] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ed9c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.127] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ed9c) returned 0x32 [0105.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed50) returned 1 [0105.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed4c) returned 1 [0105.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed38) returned 1 [0105.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed34) returned 1 [0105.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0105.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0105.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0105.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0105.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0105.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0105.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0105.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed90) returned 1 [0105.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed8c) returned 1 [0105.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb4) returned 1 [0105.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edc0) returned 1 [0105.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edc8) returned 1 [0105.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edc4) returned 1 [0105.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0105.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0105.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0105.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0105.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd5d601, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd5d601, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0105.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd5d601, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd5d601, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0105.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0105.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.134] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0105.134] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7f30 [0105.134] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0105.134] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0105.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0105.135] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7cb0 [0105.135] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.135] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.135] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.135] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.135] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.135] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.135] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.136] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.136] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.136] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.136] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.136] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.136] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.136] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.136] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.136] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.136] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.136] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.137] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.137] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.137] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.137] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.137] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.137] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.137] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.137] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.137] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.137] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.137] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.138] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.138] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.138] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0105.138] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0105.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0105.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0105.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0105.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0105.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xf8e331aa, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xf8e331aa, ftLastAccessTime.dwHighDateTime=0x1d2ced7, ftLastWriteTime.dwLowDateTime=0xf8e331aa, ftLastWriteTime.dwHighDateTime=0x1d2ced7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0105.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xf8e331aa, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xf8e331aa, ftLastAccessTime.dwHighDateTime=0x1d2ced7, ftLastWriteTime.dwLowDateTime=0xf8e331aa, ftLastWriteTime.dwHighDateTime=0x1d2ced7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0105.138] GetFullPathNameW (in: lpFileName="My Pictures", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Pictures", lpFilePart=0x0) returned 0x28 [0105.138] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7cb0 [0105.139] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.139] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0105.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0105.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2a [0105.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x2b [0105.139] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Pictures\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0xffffffff [0105.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0105.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0105.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd5d601, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd5d601, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0105.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd5d601, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd5d601, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0105.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0105.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.141] GetFullPathNameW (in: lpFileName="Documents", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Documents", lpFilePart=0x0) returned 0x26 [0105.141] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7cb0 [0105.141] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0105.141] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0105.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0105.141] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7f30 [0105.142] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.142] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.142] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.142] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.142] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.142] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.142] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.142] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.142] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.142] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.143] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.143] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.143] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.143] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.143] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.143] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.143] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.143] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.143] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.143] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.143] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.144] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.144] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.144] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.144] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.144] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.144] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.144] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.144] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.144] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.144] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.144] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0105.145] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0105.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.145] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0105.145] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7cb0 [0105.145] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.146] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0105.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0105.146] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7cb0 [0105.146] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.146] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.146] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.146] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.146] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.146] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0105.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.147] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0105.147] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7cb0 [0105.147] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.147] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0105.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0105.147] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7cb0 [0105.148] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.148] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.148] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.148] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.148] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.148] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0105.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.149] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0105.149] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7df0 [0105.149] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.149] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0105.149] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7df0 [0105.149] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.149] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.149] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.150] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.150] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.150] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.150] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.150] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.150] GetSystemMetrics (nIndex=42) returned 0 [0105.150] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.150] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", lpFilePart=0x0) returned 0x39 [0105.150] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\desktop.ini.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0105.150] GetFileType (hFile=0x298) returned 0x1 [0105.151] GetFileType (hFile=0x298) returned 0x1 [0105.151] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119eed4 | out: lpFileSizeHigh=0x119eed4*=0x0) returned 0xe0 [0105.151] ReadFile (in: hFile=0x298, lpBuffer=0x2fb0284, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119ee80, lpOverlapped=0x0 | out: lpBuffer=0x2fb0284*, lpNumberOfBytesRead=0x119ee80*=0xe0, lpOverlapped=0x0) returned 1 [0105.151] CloseHandle (hObject=0x298) returned 1 [0105.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x34 [0105.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb8) returned 1 [0105.152] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0105.152] GetFileType (hFile=0x298) returned 0x1 [0105.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb4) returned 1 [0105.152] GetFileType (hFile=0x298) returned 0x1 [0105.152] WriteFile (in: hFile=0x298, lpBuffer=0x2fb1dd0*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x119ee44, lpOverlapped=0x0 | out: lpBuffer=0x2fb1dd0*, lpNumberOfBytesWritten=0x119ee44*=0xd8, lpOverlapped=0x0) returned 1 [0105.153] CloseHandle (hObject=0x298) returned 1 [0105.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c00c073, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c00c073, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c00c073, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c00c073, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.154] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0105.154] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7df0 [0105.154] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.154] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0105.154] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7cb0 [0105.154] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.155] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.155] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.155] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.155] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.155] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.155] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0105.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e9cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", lpFilePart=0x0) returned 0x39 [0105.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", lpFilePart=0x0) returned 0x39 [0105.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e968, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", lpFilePart=0x0) returned 0x39 [0105.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", lpFilePart=0x0) returned 0x39 [0105.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0105.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\desktop.ini.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee8c | out: lpFileInformation=0x119ee8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705cd06d, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x705cd06d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705cd06d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0105.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee74) returned 1 [0105.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e95c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", lpFilePart=0x0) returned 0x39 [0105.155] GetFullPathNameW (in: lpFileName="desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2d [0105.155] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", lpFindFileData=0x119eb9c | out: lpFindFileData=0x119eb9c) returned 0x15f7cb0 [0105.156] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebac | out: lpFindFileData=0x119ebac) returned 0 [0105.156] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0105.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee34) returned 1 [0105.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee40) returned 1 [0105.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e924, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", lpFilePart=0x0) returned 0x39 [0105.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", lpFilePart=0x0) returned 0x39 [0105.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e9c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", lpFilePart=0x0) returned 0x39 [0105.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee48) returned 1 [0105.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\desktop.ini.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eec4 | out: lpFileInformation=0x119eec4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705cd06d, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x705cd06d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705cd06d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0105.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee44) returned 1 [0105.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime", lpFilePart=0x0) returned 0x39 [0105.156] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\desktop.ini.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\desktop.ini.lime")) returned 1 [0105.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c00c073, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c00c073, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c00c073, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c00c073, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.157] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0105.157] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7df0 [0105.157] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.157] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0105.158] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7f30 [0105.158] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.158] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.158] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.158] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.158] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.158] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0105.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c00c073, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c00c073, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c00c073, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c00c073, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.159] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0105.159] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7df0 [0105.159] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.159] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0105.159] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7cb0 [0105.159] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.159] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.159] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.160] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.160] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.160] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0105.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.160] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.160] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.160] GetSystemMetrics (nIndex=42) returned 0 [0105.160] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.160] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", lpFilePart=0x0) returned 0x3c [0105.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0105.160] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\favorites.vssx.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0105.160] GetFileType (hFile=0x298) returned 0x1 [0105.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.160] GetFileType (hFile=0x298) returned 0x1 [0105.160] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119eed4 | out: lpFileSizeHigh=0x119eed4*=0x0) returned 0x10 [0105.160] ReadFile (in: hFile=0x298, lpBuffer=0x2fbd5b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x119ee80, lpOverlapped=0x0 | out: lpBuffer=0x2fbd5b4*, lpNumberOfBytesRead=0x119ee80*=0x10, lpOverlapped=0x0) returned 1 [0105.161] CloseHandle (hObject=0x298) returned 1 [0105.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x37 [0105.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb8) returned 1 [0105.161] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\favorites.vssx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0105.161] GetFileType (hFile=0x298) returned 0x1 [0105.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb4) returned 1 [0105.162] GetFileType (hFile=0x298) returned 0x1 [0105.162] CloseHandle (hObject=0x298) returned 1 [0105.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c0322c7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c0322c7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c0322c7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c0322c7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.162] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0105.162] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7df0 [0105.162] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.162] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0105.163] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7df0 [0105.163] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.163] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.163] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.163] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.163] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.163] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.163] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", nBufferLength=0x105, lpBuffer=0x119e9cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", lpFilePart=0x0) returned 0x3c [0105.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", lpFilePart=0x0) returned 0x3c [0105.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", nBufferLength=0x105, lpBuffer=0x119e968, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", lpFilePart=0x0) returned 0x3c [0105.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", nBufferLength=0x105, lpBuffer=0x119e990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", lpFilePart=0x0) returned 0x3c [0105.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0105.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\favorites.vssx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee8c | out: lpFileInformation=0x119ee8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705f329c, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0105.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee74) returned 1 [0105.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e95c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", lpFilePart=0x0) returned 0x3c [0105.164] GetFullPathNameW (in: lpFileName="Favorites.vssx.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Favorites.vssx.Lime", lpFilePart=0x0) returned 0x30 [0105.164] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", lpFindFileData=0x119eb9c | out: lpFindFileData=0x119eb9c) returned 0x15f7df0 [0105.164] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebac | out: lpFindFileData=0x119ebac) returned 0 [0105.164] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee34) returned 1 [0105.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee40) returned 1 [0105.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", nBufferLength=0x105, lpBuffer=0x119e924, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", lpFilePart=0x0) returned 0x3c [0105.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", lpFilePart=0x0) returned 0x3c [0105.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", nBufferLength=0x105, lpBuffer=0x119e9c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", lpFilePart=0x0) returned 0x3c [0105.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee48) returned 1 [0105.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\favorites.vssx.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eec4 | out: lpFileInformation=0x119eec4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705f329c, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x705f329c, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x705f329c, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0105.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee44) returned 1 [0105.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime", lpFilePart=0x0) returned 0x3c [0105.164] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\Favorites.vssx.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\favorites.vssx.lime")) returned 1 [0105.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c0322c7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c0322c7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c0322c7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c0322c7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.165] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0105.165] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7df0 [0105.165] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.165] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0105.166] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7df0 [0105.166] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.166] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.166] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.166] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.166] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.166] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c0322c7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c0322c7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c042fd4, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c0322c7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c0322c7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.167] GetFullPathNameW (in: lpFileName="My Shapes", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\My Shapes", lpFilePart=0x0) returned 0x26 [0105.167] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7df0 [0105.167] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.167] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x29 [0105.167] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7df0 [0105.167] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.167] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.167] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.168] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.168] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.168] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e90c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x119ee30 | out: lpFileInformation=0x119ee30*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x706194c4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x706194c4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x119ee24 | out: lpFileInformation=0x119ee24*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x706194c4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x706194c4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.168] GetFullPathNameW (in: lpFileName="_private", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_private", lpFilePart=0x0) returned 0x25 [0105.168] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFindFileData=0x119eb40 | out: lpFindFileData=0x119eb40) returned 0x15f7df0 [0105.168] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb50 | out: lpFindFileData=0x119eb50) returned 0 [0105.168] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\.", nBufferLength=0x105, lpBuffer=0x119e8c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x119e8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x32 [0105.169] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x119eb74 | out: lpFindFileData=0x119eb74) returned 0x15f7df0 [0105.169] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.169] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.169] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 0 [0105.169] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e90c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x119ee30 | out: lpFileInformation=0x119ee30*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x706194c4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x706194c4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x119ee24 | out: lpFileInformation=0x119ee24*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x706194c4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x706194c4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.170] GetFullPathNameW (in: lpFileName="_private", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_private", lpFilePart=0x0) returned 0x25 [0105.170] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFindFileData=0x119eb40 | out: lpFindFileData=0x119eb40) returned 0x15f7f30 [0105.170] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119eb50 | out: lpFindFileData=0x119eb50) returned 0 [0105.170] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0105.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\.", nBufferLength=0x105, lpBuffer=0x119e8c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x119e8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x32 [0105.170] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x119eb74 | out: lpFindFileData=0x119eb74) returned 0x15f7df0 [0105.170] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.170] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.170] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 0 [0105.170] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e90c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.171] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x119ee30 | out: lpFileInformation=0x119ee30*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x706194c4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x706194c4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.171] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x119ee24 | out: lpFileInformation=0x119ee24*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x706194c4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x706194c4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.171] GetFullPathNameW (in: lpFileName="_private", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_private", lpFilePart=0x0) returned 0x25 [0105.171] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFindFileData=0x119eb40 | out: lpFindFileData=0x119eb40) returned 0x15f7df0 [0105.171] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb50 | out: lpFindFileData=0x119eb50) returned 0 [0105.171] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\.", nBufferLength=0x105, lpBuffer=0x119e8c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x119e8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x32 [0105.171] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x119eb74 | out: lpFindFileData=0x119eb74) returned 0x15f7df0 [0105.171] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.172] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.172] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 0 [0105.172] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.172] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.172] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.172] GetSystemMetrics (nIndex=42) returned 0 [0105.172] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.172] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", lpFilePart=0x0) returned 0x41 [0105.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed90) returned 1 [0105.172] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private\\folder.ico.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0105.172] GetFileType (hFile=0x298) returned 0x1 [0105.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed8c) returned 1 [0105.172] GetFileType (hFile=0x298) returned 0x1 [0105.172] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119ee94 | out: lpFileSizeHigh=0x119ee94*=0x0) returned 0x74f0 [0105.172] ReadFile (in: hFile=0x298, lpBuffer=0x2fd188c, nNumberOfBytesToRead=0x74f0, lpNumberOfBytesRead=0x119ee40, lpOverlapped=0x0 | out: lpBuffer=0x2fd188c*, lpNumberOfBytesRead=0x119ee40*=0x74f0, lpOverlapped=0x0) returned 1 [0105.173] CloseHandle (hObject=0x298) returned 1 [0105.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x119e864, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3c [0105.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed78) returned 1 [0105.174] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0105.175] GetFileType (hFile=0x298) returned 0x1 [0105.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed74) returned 1 [0105.175] GetFileType (hFile=0x298) returned 0x1 [0105.175] WriteFile (in: hFile=0x298, lpBuffer=0x2fe0aec*, nNumberOfBytesToWrite=0x74e6, lpNumberOfBytesWritten=0x119ee30, lpOverlapped=0x0 | out: lpBuffer=0x2fe0aec*, lpNumberOfBytesWritten=0x119ee30*=0x74e6, lpOverlapped=0x0) returned 1 [0105.175] CloseHandle (hObject=0x298) returned 1 [0105.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e90c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x119ee30 | out: lpFileInformation=0x119ee30*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c0322c7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c0322c7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x119ee24 | out: lpFileInformation=0x119ee24*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c0322c7, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c0322c7, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.177] GetFullPathNameW (in: lpFileName="_private", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_private", lpFilePart=0x0) returned 0x25 [0105.177] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFindFileData=0x119eb40 | out: lpFindFileData=0x119eb40) returned 0x15f7e30 [0105.177] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119eb50 | out: lpFindFileData=0x119eb50) returned 0 [0105.177] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0105.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\.", nBufferLength=0x105, lpBuffer=0x119e8c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x119e8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x32 [0105.177] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x119eb74 | out: lpFindFileData=0x119eb74) returned 0x15f7e30 [0105.177] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.178] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.178] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.178] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 0 [0105.178] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0105.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", lpFilePart=0x0) returned 0x41 [0105.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", nBufferLength=0x105, lpBuffer=0x119e954, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", lpFilePart=0x0) returned 0x41 [0105.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", nBufferLength=0x105, lpBuffer=0x119e928, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", lpFilePart=0x0) returned 0x41 [0105.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e954, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", nBufferLength=0x105, lpBuffer=0x119e950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", lpFilePart=0x0) returned 0x41 [0105.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0105.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private\\folder.ico.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee4c | out: lpFileInformation=0x119ee4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x706194c4, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x706194c4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x706194c4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x74f0)) returned 1 [0105.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e91c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", nBufferLength=0x105, lpBuffer=0x119e8d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", lpFilePart=0x0) returned 0x41 [0105.178] GetFullPathNameW (in: lpFileName="folder.ico.Lime", nBufferLength=0x105, lpBuffer=0x119e8d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\folder.ico.Lime", lpFilePart=0x0) returned 0x2c [0105.178] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", lpFindFileData=0x119eb5c | out: lpFindFileData=0x119eb5c) returned 0x15f7e30 [0105.178] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119eb6c | out: lpFindFileData=0x119eb6c) returned 0 [0105.178] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0105.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0105.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee00) returned 1 [0105.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", lpFilePart=0x0) returned 0x41 [0105.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", lpFilePart=0x0) returned 0x41 [0105.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", nBufferLength=0x105, lpBuffer=0x119e988, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", lpFilePart=0x0) returned 0x41 [0105.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee08) returned 1 [0105.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private\\folder.ico.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee84 | out: lpFileInformation=0x119ee84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x706194c4, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x706194c4, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x706194c4, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x74f0)) returned 1 [0105.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee04) returned 1 [0105.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime", lpFilePart=0x0) returned 0x41 [0105.179] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\folder.ico.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private\\folder.ico.lime")) returned 1 [0105.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e90c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x119ee30 | out: lpFileInformation=0x119ee30*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c05889a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c05889a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5jghkoaofdp\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x119ee24 | out: lpFileInformation=0x119ee24*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4c790443, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0x9c05889a, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c05889a, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x119e900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes", lpFilePart=0x0) returned 0x28 [0105.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.180] GetFullPathNameW (in: lpFileName="_private", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\_private", lpFilePart=0x0) returned 0x25 [0105.180] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFindFileData=0x119eb40 | out: lpFindFileData=0x119eb40) returned 0x15f7e30 [0105.180] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119eb50 | out: lpFindFileData=0x119eb50) returned 0 [0105.180] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0105.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\.", nBufferLength=0x105, lpBuffer=0x119e8c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x31 [0105.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x119e8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x32 [0105.181] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x119eb74 | out: lpFindFileData=0x119eb74) returned 0x15f7e30 [0105.181] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.181] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.181] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 0 [0105.181] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0105.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\", lpFilePart=0x0) returned 0x1f [0105.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.182] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7e30 [0105.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee50) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.190] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.190] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.190] GetSystemMetrics (nIndex=42) returned 0 [0105.190] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.190] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed90) returned 1 [0105.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed8c) returned 1 [0105.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed78) returned 1 [0105.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed74) returned 1 [0105.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0105.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0105.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0105.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0105.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0105.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0105.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0105.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0105.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0105.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee00) returned 1 [0105.196] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.196] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.196] GetSystemMetrics (nIndex=42) returned 0 [0105.196] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.196] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.209] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook\\quick notes.one"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0105.209] GetFileType (hFile=0x298) returned 0x1 [0105.209] GetFileType (hFile=0x298) returned 0x1 [0105.209] WriteFile (in: hFile=0x298, lpBuffer=0x420ddf8*, nNumberOfBytesToWrite=0x58628, lpNumberOfBytesWritten=0x119ee30, lpOverlapped=0x0 | out: lpBuffer=0x420ddf8*, lpNumberOfBytesWritten=0x119ee30*=0x58628, lpOverlapped=0x0) returned 1 [0105.212] CloseHandle (hObject=0x298) returned 1 [0105.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook"), fInfoLevelId=0x0, lpFileInformation=0x119ee30 | out: lpFileInformation=0x119ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x298faba1, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x9c0a4a69, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c0a4a69, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook"), fInfoLevelId=0x0, lpFileInformation=0x119ee24 | out: lpFileInformation=0x119ee24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x298faba1, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x9c0a4a69, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c0a4a69, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.218] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook", lpFindFileData=0x119eb40 | out: lpFindFileData=0x119eb40) returned 0x15f7eb0 [0105.218] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0105.218] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x119eb74 | out: lpFindFileData=0x119eb74) returned 0x15f7eb0 [0105.218] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.219] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.220] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0105.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook\\quick notes.one.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee4c | out: lpFileInformation=0x119ee4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7068bc3e, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7068bc3e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7068bc3e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x58630)) returned 1 [0105.220] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.Lime", lpFindFileData=0x119eb5c | out: lpFindFileData=0x119eb5c) returned 0x15f7eb0 [0105.221] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0105.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook\\quick notes.one.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee84 | out: lpFileInformation=0x119ee84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7068bc3e, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7068bc3e, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7068bc3e, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x58630)) returned 1 [0105.221] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook\\quick notes.one.lime")) returned 1 [0105.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook"), fInfoLevelId=0x0, lpFileInformation=0x119ee30 | out: lpFileInformation=0x119ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x298faba1, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x9c0a4a69, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c0a4a69, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook" (normalized: "c:\\users\\5jghkoaofdp\\documents\\onenote notebooks\\my notebook"), fInfoLevelId=0x0, lpFileInformation=0x119ee24 | out: lpFileInformation=0x119ee24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x298faba1, ftCreationTime.dwHighDateTime=0x1d2d995, ftLastAccessTime.dwLowDateTime=0x9c0a4a69, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c0a4a69, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.225] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook", lpFindFileData=0x119eb40 | out: lpFindFileData=0x119eb40) returned 0x15f7eb0 [0105.225] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0105.226] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x119eb74 | out: lpFindFileData=0x119eb74) returned 0x15f7eb0 [0105.226] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.226] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0105.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd5d601, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd5d601, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0105.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents" (normalized: "c:\\users\\5jghkoaofdp\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9bd5d601, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9bd5d601, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0105.227] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7eb0 [0105.227] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0105.227] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7eb0 [0105.228] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.228] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.228] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.228] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x671c95f7, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x7074a976, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7074a976, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x671c95f7, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x7074a976, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7074a976, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.237] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7eb0 [0105.237] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0105.237] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7eb0 [0105.237] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.237] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.238] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0105.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x671c95f7, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x7074a976, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7074a976, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x671c95f7, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x7074a976, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7074a976, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.238] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7f30 [0105.238] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0105.239] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7eb0 [0105.239] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.239] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.239] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0105.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x671c95f7, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x7074a976, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7074a976, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x671c95f7, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x7074a976, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7074a976, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.240] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7eb0 [0105.240] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0105.240] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7eb0 [0105.240] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.240] FindNextFileW (in: hFindFile=0x15f7eb0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.240] FindClose (in: hFindFile=0x15f7eb0 | out: hFindFile=0x15f7eb0) returned 1 [0105.241] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.241] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.241] GetSystemMetrics (nIndex=42) returned 0 [0105.241] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.241] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.241] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files\\cjeijc.diuv@div.com.pst.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0105.241] GetFileType (hFile=0x298) returned 0x1 [0105.241] GetFileType (hFile=0x298) returned 0x1 [0105.241] GetFileSize (in: hFile=0x298, lpFileSizeHigh=0x119eed4 | out: lpFileSizeHigh=0x119eed4*=0x0) returned 0x42410 [0105.253] ReadFile (in: hFile=0x298, lpBuffer=0x3eb9390, nNumberOfBytesToRead=0x42410, lpNumberOfBytesRead=0x119ee80, lpOverlapped=0x0 | out: lpBuffer=0x3eb9390*, lpNumberOfBytesRead=0x119ee80*=0x42410, lpOverlapped=0x0) returned 1 [0105.255] CloseHandle (hObject=0x298) returned 1 [0105.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst", lpFilePart=0x0) returned 0x44 [0105.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb8) returned 1 [0105.264] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files\\cjeijc.diuv@div.com.pst"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x298 [0105.264] GetFileType (hFile=0x298) returned 0x1 [0105.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb4) returned 1 [0105.264] GetFileType (hFile=0x298) returned 0x1 [0105.265] WriteFile (in: hFile=0x298, lpBuffer=0x3f3dbf0*, nNumberOfBytesToWrite=0x42400, lpNumberOfBytesWritten=0x119ee70, lpOverlapped=0x0 | out: lpBuffer=0x3f3dbf0*, lpNumberOfBytesWritten=0x119ee70*=0x42400, lpOverlapped=0x0) returned 1 [0105.267] CloseHandle (hObject=0x298) returned 1 [0105.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x671c95f7, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x9c1170b8, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c1170b8, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x671c95f7, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x9c1170b8, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c1170b8, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.272] GetFullPathNameW (in: lpFileName="Outlook Files", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Outlook Files", lpFilePart=0x0) returned 0x2a [0105.272] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7c70 [0105.272] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.272] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0105.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x2d [0105.272] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7f30 [0105.272] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.272] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.272] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.272] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.272] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0105.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", nBufferLength=0x105, lpBuffer=0x119e9cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", lpFilePart=0x0) returned 0x49 [0105.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", lpFilePart=0x0) returned 0x49 [0105.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", nBufferLength=0x105, lpBuffer=0x119e968, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", lpFilePart=0x0) returned 0x49 [0105.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", nBufferLength=0x105, lpBuffer=0x119e990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", lpFilePart=0x0) returned 0x49 [0105.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0105.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files\\cjeijc.diuv@div.com.pst.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee8c | out: lpFileInformation=0x119ee8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7072457b, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7072457b, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7074a976, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x42410)) returned 1 [0105.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee74) returned 1 [0105.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e95c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", lpFilePart=0x0) returned 0x49 [0105.273] GetFullPathNameW (in: lpFileName="cjeijc.diuv@div.com.pst.Lime", nBufferLength=0x105, lpBuffer=0x119e918, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\cjeijc.diuv@div.com.pst.Lime", lpFilePart=0x0) returned 0x39 [0105.273] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", lpFindFileData=0x119eb9c | out: lpFindFileData=0x119eb9c) returned 0x15f7c70 [0105.273] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebac | out: lpFindFileData=0x119ebac) returned 0 [0105.273] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0105.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee34) returned 1 [0105.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee40) returned 1 [0105.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", nBufferLength=0x105, lpBuffer=0x119e924, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", lpFilePart=0x0) returned 0x49 [0105.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", lpFilePart=0x0) returned 0x49 [0105.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", nBufferLength=0x105, lpBuffer=0x119e9c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", lpFilePart=0x0) returned 0x49 [0105.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee48) returned 1 [0105.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files\\cjeijc.diuv@div.com.pst.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eec4 | out: lpFileInformation=0x119eec4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7072457b, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x7072457b, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x7074a976, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x42410)) returned 1 [0105.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee44) returned 1 [0105.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime", lpFilePart=0x0) returned 0x49 [0105.273] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\cjeijc.diuv@div.com.pst.Lime" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files\\cjeijc.diuv@div.com.pst.lime")) returned 1 [0105.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x671c95f7, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x9c13e208, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c13e208, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files" (normalized: "c:\\users\\5jghkoaofdp\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x671c95f7, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0x9c13e208, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c13e208, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents", lpFilePart=0x0) returned 0x1e [0105.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.276] GetFullPathNameW (in: lpFileName="Outlook Files", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Outlook Files", lpFilePart=0x0) returned 0x2a [0105.276] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7df0 [0105.276] FindNextFileW (in: hFindFile=0x15f7df0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.276] FindClose (in: hFindFile=0x15f7df0 | out: hFindFile=0x15f7df0) returned 1 [0105.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\.", nBufferLength=0x105, lpBuffer=0x119e908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2c [0105.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x2d [0105.276] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Documents\\Outlook Files\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7e30 [0105.276] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.276] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.276] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.277] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0105.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.277] CoTaskMemAlloc (cb=0x20c) returned 0x1624b30 [0105.277] SHGetFolderPathW (in: hwnd=0x0, csidl=39, hToken=0x0, dwFlags=0x0, pszPath=0x1624b30 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Pictures") returned 0x0 [0105.277] CoTaskMemFree (pv=0x1624b30) [0105.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0105.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x708557fc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708557fc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x708557fc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708557fc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0105.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.278] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0105.278] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7c70 [0105.278] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0105.278] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0105.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.278] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7e30 [0105.278] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.278] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.278] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.278] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.278] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.278] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.279] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.279] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.279] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.279] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.279] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.279] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.279] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.279] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.279] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.279] FindNextFileW (in: hFindFile=0x15f7e30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0105.279] FindClose (in: hFindFile=0x15f7e30 | out: hFindFile=0x15f7e30) returned 1 [0105.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0105.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x708557fc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708557fc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x708557fc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708557fc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0105.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.280] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0105.280] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7cb0 [0105.280] FindNextFileW (in: hFindFile=0x15f7cb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0105.280] FindClose (in: hFindFile=0x15f7cb0 | out: hFindFile=0x15f7cb0) returned 1 [0105.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.280] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7bb0 [0105.280] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.281] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0105.282] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0105.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0105.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x708557fc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708557fc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x708557fc, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x708557fc, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0105.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.282] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0105.282] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7bb0 [0105.282] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0105.282] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0105.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.283] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7bb0 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.283] FindNextFileW (in: hFindFile=0x15f7bb0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0105.283] FindClose (in: hFindFile=0x15f7bb0 | out: hFindFile=0x15f7bb0) returned 1 [0105.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.283] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.283] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.283] GetSystemMetrics (nIndex=42) returned 0 [0105.283] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.283] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", lpFilePart=0x0) returned 0x2b [0105.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0105.283] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\8yzc.gif.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2dc [0105.284] GetFileType (hFile=0x2dc) returned 0x1 [0105.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.284] GetFileType (hFile=0x2dc) returned 0x1 [0105.284] GetFileSize (in: hFile=0x2dc, lpFileSizeHigh=0x119ef14 | out: lpFileSizeHigh=0x119ef14*=0x0) returned 0xbd20 [0105.284] ReadFile (in: hFile=0x2dc, lpBuffer=0x2ede248, nNumberOfBytesToRead=0xbd20, lpNumberOfBytesRead=0x119eec0, lpOverlapped=0x0 | out: lpBuffer=0x2ede248*, lpNumberOfBytesRead=0x119eec0*=0xbd20, lpOverlapped=0x0) returned 1 [0105.285] CloseHandle (hObject=0x2dc) returned 1 [0105.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif", lpFilePart=0x0) returned 0x26 [0105.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0105.287] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\8yzc.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2dc [0105.287] GetFileType (hFile=0x2dc) returned 0x1 [0105.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0105.287] GetFileType (hFile=0x2dc) returned 0x1 [0105.287] WriteFile (in: hFile=0x2dc, lpBuffer=0x2ef64dc*, nNumberOfBytesToWrite=0xbd11, lpNumberOfBytesWritten=0x119eeb0, lpOverlapped=0x0 | out: lpBuffer=0x2ef64dc*, lpNumberOfBytesWritten=0x119eeb0*=0xbd11, lpOverlapped=0x0) returned 1 [0105.288] CloseHandle (hObject=0x2dc) returned 1 [0105.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0105.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9c1635fb, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c1635fb, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9c1635fb, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c1635fb, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0105.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.290] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0105.290] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7e70 [0105.290] FindNextFileW (in: hFindFile=0x15f7e70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0105.290] FindClose (in: hFindFile=0x15f7e70 | out: hFindFile=0x15f7e70) returned 1 [0105.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.290] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7f30 [0105.290] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.291] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.291] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.291] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 0 [0105.291] FindClose (in: hFindFile=0x15f7f30 | out: hFindFile=0x15f7f30) returned 1 [0105.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", nBufferLength=0x105, lpBuffer=0x119ea0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", lpFilePart=0x0) returned 0x2b [0105.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", lpFilePart=0x0) returned 0x2b [0105.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", lpFilePart=0x0) returned 0x2b [0105.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", lpFilePart=0x0) returned 0x2b [0105.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0105.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\8yzc.gif.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eecc | out: lpFileInformation=0x119eecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70770a5d, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70770a5d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70770a5d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0xbd20)) returned 1 [0105.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0105.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", lpFilePart=0x0) returned 0x2b [0105.291] GetFullPathNameW (in: lpFileName="8YzC.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e958, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\8YzC.gif.Lime", lpFilePart=0x0) returned 0x2a [0105.291] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", lpFindFileData=0x119ebdc | out: lpFindFileData=0x119ebdc) returned 0x15f7c70 [0105.291] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebec | out: lpFindFileData=0x119ebec) returned 0 [0105.291] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0105.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0105.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0105.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", lpFilePart=0x0) returned 0x2b [0105.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", lpFilePart=0x0) returned 0x2b [0105.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", nBufferLength=0x105, lpBuffer=0x119ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", lpFilePart=0x0) returned 0x2b [0105.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0105.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\8yzc.gif.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ef04 | out: lpFileInformation=0x119ef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70770a5d, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70770a5d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70770a5d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0xbd20)) returned 1 [0105.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0105.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", nBufferLength=0x105, lpBuffer=0x119ea14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime", lpFilePart=0x0) returned 0x2b [0105.292] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\8YzC.gif.Lime" (normalized: "c:\\users\\5jghkoaofdp\\pictures\\8yzc.gif.lime")) returned 1 [0105.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e98c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e9b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0105.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x119eeb0 | out: lpFileInformation=0x119eeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9c1635fb, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c1635fb, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures" (normalized: "c:\\users\\5jghkoaofdp\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x119eea4 | out: lpFileInformation=0x119eea4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf8bd0c26, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0x9c1635fb, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c1635fb, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp", nBufferLength=0x105, lpBuffer=0x119e980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp", lpFilePart=0x0) returned 0x14 [0105.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.293] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x119e93c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Pictures", lpFilePart=0x0) returned 0x25 [0105.293] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFindFileData=0x119ebc0 | out: lpFindFileData=0x119ebc0) returned 0x15f7c70 [0105.293] FindNextFileW (in: hFindFile=0x15f7c70, lpFindFileData=0x119ebd0 | out: lpFindFileData=0x119ebd0) returned 0 [0105.293] FindClose (in: hFindFile=0x15f7c70 | out: hFindFile=0x15f7c70) returned 1 [0105.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x119e948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures", nBufferLength=0x105, lpBuffer=0x119e9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures", lpFilePart=0x0) returned 0x1d [0105.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.293] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\*", lpFindFileData=0x119ebf4 | out: lpFindFileData=0x119ebf4) returned 0x15f7f30 [0105.293] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.294] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.294] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.294] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.294] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.294] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.294] FindNextFileW (in: hFindFile=0x15f7f30, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0105.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.296] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.296] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.296] GetSystemMetrics (nIndex=42) returned 0 [0105.296] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.296] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png.Lime", lpFilePart=0x0) returned 0x36 [0105.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0105.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\97QMvfP-n9T7b4U.png", lpFilePart=0x0) returned 0x31 [0105.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0105.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0105.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0105.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0105.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0105.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.305] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.305] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.305] GetSystemMetrics (nIndex=42) returned 0 [0105.306] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.306] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp.Lime", lpFilePart=0x0) returned 0x3b [0105.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0105.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\9pzHJofdZk0Fqc8d56gX.bmp", lpFilePart=0x0) returned 0x36 [0105.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0105.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0105.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0105.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0105.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0105.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0105.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0105.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.311] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.311] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.311] GetSystemMetrics (nIndex=42) returned 0 [0105.311] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.311] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png.Lime", lpFilePart=0x0) returned 0x3a [0105.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0105.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\auOxLTYRVw31 BiYhvN.png", lpFilePart=0x0) returned 0x35 [0105.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0105.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0105.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0105.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0105.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0105.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0105.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0105.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.317] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.317] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.317] GetSystemMetrics (nIndex=42) returned 0 [0105.317] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.317] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2e [0105.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0105.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x29 [0105.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf8) returned 1 [0105.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf4) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee50) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eeb4) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee74) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee80) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee88) returned 1 [0105.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee84) returned 1 [0105.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.320] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.321] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.321] GetSystemMetrics (nIndex=42) returned 0 [0105.321] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.321] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\GhM3IdiNT.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\GhM3IdiNT.gif.Lime", lpFilePart=0x0) returned 0x30 [0105.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\GhM3IdiNT.gif", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\GhM3IdiNT.gif", lpFilePart=0x0) returned 0x2b [0105.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.328] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.328] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.328] GetSystemMetrics (nIndex=42) returned 0 [0105.328] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.328] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\hosHP.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\hosHP.gif.Lime", lpFilePart=0x0) returned 0x2c [0105.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\hosHP.gif", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\hosHP.gif", lpFilePart=0x0) returned 0x27 [0105.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.336] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.336] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.336] GetSystemMetrics (nIndex=42) returned 0 [0105.336] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.336] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\n5qsJb_LEdbTLAcmga4j.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\n5qsJb_LEdbTLAcmga4j.gif.Lime", lpFilePart=0x0) returned 0x3b [0105.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\n5qsJb_LEdbTLAcmga4j.gif", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\n5qsJb_LEdbTLAcmga4j.gif", lpFilePart=0x0) returned 0x36 [0105.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.343] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.343] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.343] GetSystemMetrics (nIndex=42) returned 0 [0105.343] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.343] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\qxZ5ViMm.png.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\qxZ5ViMm.png.Lime", lpFilePart=0x0) returned 0x2f [0105.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\qxZ5ViMm.png", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\qxZ5ViMm.png", lpFilePart=0x0) returned 0x2a [0105.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.347] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.347] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.347] GetSystemMetrics (nIndex=42) returned 0 [0105.347] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.347] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\TKNpEQ.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\TKNpEQ.gif.Lime", lpFilePart=0x0) returned 0x2d [0105.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\TKNpEQ.gif", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\TKNpEQ.gif", lpFilePart=0x0) returned 0x28 [0105.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.352] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.352] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.352] GetSystemMetrics (nIndex=42) returned 0 [0105.352] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.352] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\wU1fTNFscO5z.png.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\wU1fTNFscO5z.png.Lime", lpFilePart=0x0) returned 0x33 [0105.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\wU1fTNFscO5z.png", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\wU1fTNFscO5z.png", lpFilePart=0x0) returned 0x2e [0105.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\", lpFilePart=0x0) returned 0x1e [0105.355] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.355] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.355] GetSystemMetrics (nIndex=42) returned 0 [0105.355] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.355] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\zlzVFb43acCZKC2bhu4j.png.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\zlzVFb43acCZKC2bhu4j.png.Lime", lpFilePart=0x0) returned 0x3b [0105.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\zlzVFb43acCZKC2bhu4j.png", nBufferLength=0x105, lpBuffer=0x119e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\zlzVFb43acCZKC2bhu4j.png", lpFilePart=0x0) returned 0x36 [0105.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0105.364] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.364] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.364] GetSystemMetrics (nIndex=42) returned 0 [0105.364] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.364] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\6KkwTESp71Nc1N4E.jpg.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\6KkwTESp71Nc1N4E.jpg.Lime", lpFilePart=0x0) returned 0x4b [0105.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\6KkwTESp71Nc1N4E.jpg", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\6KkwTESp71Nc1N4E.jpg", lpFilePart=0x0) returned 0x46 [0105.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0105.368] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.368] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.368] GetSystemMetrics (nIndex=42) returned 0 [0105.368] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.368] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\6QUrAgaVKew0eLFH.png.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\6QUrAgaVKew0eLFH.png.Lime", lpFilePart=0x0) returned 0x4b [0105.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\6QUrAgaVKew0eLFH.png", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\6QUrAgaVKew0eLFH.png", lpFilePart=0x0) returned 0x46 [0105.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0105.373] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.373] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.373] GetSystemMetrics (nIndex=42) returned 0 [0105.373] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.373] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\8VDHu.png.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\8VDHu.png.Lime", lpFilePart=0x0) returned 0x40 [0105.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\8VDHu.png", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\8VDHu.png", lpFilePart=0x0) returned 0x3b [0105.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0105.378] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.378] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.378] GetSystemMetrics (nIndex=42) returned 0 [0105.378] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.378] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp.Lime", lpFilePart=0x0) returned 0x3e [0105.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\cn2.bmp", lpFilePart=0x0) returned 0x39 [0105.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0105.381] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.381] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.381] GetSystemMetrics (nIndex=42) returned 0 [0105.381] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.381] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp.Lime", lpFilePart=0x0) returned 0x43 [0105.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\eEmVU3Dk.bmp", lpFilePart=0x0) returned 0x3e [0105.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0105.385] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.385] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.385] GetSystemMetrics (nIndex=42) returned 0 [0105.385] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.385] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif.Lime", lpFilePart=0x0) returned 0x46 [0105.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\FnZhHkemnJG.gif", lpFilePart=0x0) returned 0x41 [0105.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0105.388] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.388] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.388] GetSystemMetrics (nIndex=42) returned 0 [0105.388] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.388] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif.Lime", lpFilePart=0x0) returned 0x4b [0105.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\NR6dMjKJCnTfSCqR.gif", lpFilePart=0x0) returned 0x46 [0105.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl", lpFilePart=0x0) returned 0x31 [0105.401] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.401] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.401] GetSystemMetrics (nIndex=42) returned 0 [0105.401] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.401] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif.Lime", lpFilePart=0x0) returned 0x4d [0105.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\bGLKOcSLaAs0zqepqxl\\qKgeyNbDLJNjdCbMJb.gif", lpFilePart=0x0) returned 0x48 [0105.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", lpFilePart=0x0) returned 0x30 [0105.408] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.408] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.408] GetSystemMetrics (nIndex=42) returned 0 [0105.408] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.408] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\2rVzSF_9tnvRF.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\2rVzSF_9tnvRF.gif.Lime", lpFilePart=0x0) returned 0x47 [0105.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\2rVzSF_9tnvRF.gif", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\2rVzSF_9tnvRF.gif", lpFilePart=0x0) returned 0x42 [0105.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", lpFilePart=0x0) returned 0x30 [0105.412] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.412] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.412] GetSystemMetrics (nIndex=42) returned 0 [0105.412] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.412] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\B4tjiTd_NYk uV.bmp.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\B4tjiTd_NYk uV.bmp.Lime", lpFilePart=0x0) returned 0x48 [0105.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\B4tjiTd_NYk uV.bmp", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\B4tjiTd_NYk uV.bmp", lpFilePart=0x0) returned 0x43 [0105.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", lpFilePart=0x0) returned 0x30 [0105.420] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.421] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.421] GetSystemMetrics (nIndex=42) returned 0 [0105.421] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.421] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\DC394OBjo9C.bmp.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\DC394OBjo9C.bmp.Lime", lpFilePart=0x0) returned 0x45 [0105.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\DC394OBjo9C.bmp", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\DC394OBjo9C.bmp", lpFilePart=0x0) returned 0x40 [0105.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", lpFilePart=0x0) returned 0x30 [0105.425] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.425] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.425] GetSystemMetrics (nIndex=42) returned 0 [0105.425] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.425] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\DDwZSc84E6cYJ 8LHgk.png.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\DDwZSc84E6cYJ 8LHgk.png.Lime", lpFilePart=0x0) returned 0x4d [0105.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\DDwZSc84E6cYJ 8LHgk.png", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\DDwZSc84E6cYJ 8LHgk.png", lpFilePart=0x0) returned 0x48 [0105.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", lpFilePart=0x0) returned 0x30 [0105.428] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.428] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.428] GetSystemMetrics (nIndex=42) returned 0 [0105.428] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.428] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\Ey wir.gif.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\Ey wir.gif.Lime", lpFilePart=0x0) returned 0x40 [0105.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\Ey wir.gif", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\Ey wir.gif", lpFilePart=0x0) returned 0x3b [0105.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", lpFilePart=0x0) returned 0x30 [0105.432] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.432] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.432] GetSystemMetrics (nIndex=42) returned 0 [0105.432] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.432] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\hlJOu.bmp.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\hlJOu.bmp.Lime", lpFilePart=0x0) returned 0x3f [0105.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", lpFilePart=0x0) returned 0x30 [0105.438] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.438] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.438] GetSystemMetrics (nIndex=42) returned 0 [0105.438] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.438] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\hwJCsM3ZH8GbF fZ.jpg.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\hwJCsM3ZH8GbF fZ.jpg.Lime", lpFilePart=0x0) returned 0x4a [0105.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", lpFilePart=0x0) returned 0x30 [0105.442] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.442] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.442] GetSystemMetrics (nIndex=42) returned 0 [0105.442] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.442] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\nIUEa3PYpqEoTu.jpg.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\nIUEa3PYpqEoTu.jpg.Lime", lpFilePart=0x0) returned 0x48 [0105.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", lpFilePart=0x0) returned 0x30 [0105.446] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.446] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.446] GetSystemMetrics (nIndex=42) returned 0 [0105.446] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.446] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\oTq1_.jpg.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\oTq1_.jpg.Lime", lpFilePart=0x0) returned 0x3f [0105.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", lpFilePart=0x0) returned 0x30 [0105.452] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.452] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.452] GetSystemMetrics (nIndex=42) returned 0 [0105.453] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.453] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\PRCEmYUDuMUK-xZT.jpg.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\PRCEmYUDuMUK-xZT.jpg.Lime", lpFilePart=0x0) returned 0x4a [0105.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", lpFilePart=0x0) returned 0x30 [0105.461] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.461] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.461] GetSystemMetrics (nIndex=42) returned 0 [0105.461] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.461] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\qOn7LRRg0k2GRYbq3.png.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\qOn7LRRg0k2GRYbq3.png.Lime", lpFilePart=0x0) returned 0x4b [0105.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", lpFilePart=0x0) returned 0x30 [0105.465] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.465] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.465] GetSystemMetrics (nIndex=42) returned 0 [0105.465] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.465] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\s7zxUfR6KpP NjN6.jpg.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\s7zxUfR6KpP NjN6.jpg.Lime", lpFilePart=0x0) returned 0x4a [0105.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP", lpFilePart=0x0) returned 0x30 [0105.472] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.472] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.472] GetSystemMetrics (nIndex=42) returned 0 [0105.472] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.472] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\XiTw GiaPPpj1nCqCjGV.bmp.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Pictures\\cGLZ_jmC_lOB0ujFfP\\XiTw GiaPPpj1nCqCjGV.bmp.Lime", lpFilePart=0x0) returned 0x4e [0105.476] CoTaskMemAlloc (cb=0x20c) returned 0x1624b30 [0105.476] SHGetFolderPathW (in: hwnd=0x0, csidl=13, hToken=0x0, dwFlags=0x0, pszPath=0x1624b30 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Music") returned 0x0 [0105.476] CoTaskMemFree (pv=0x1624b30) [0105.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x119e9ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0105.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0105.477] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.477] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.477] GetSystemMetrics (nIndex=42) returned 0 [0105.477] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.477] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\C-56aS7eiAlL.mp3.Lime", lpFilePart=0x0) returned 0x30 [0105.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0105.481] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.481] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.481] GetSystemMetrics (nIndex=42) returned 0 [0105.481] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.481] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\desktop.ini.Lime", lpFilePart=0x0) returned 0x2b [0105.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0105.484] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.484] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.484] GetSystemMetrics (nIndex=42) returned 0 [0105.484] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.484] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\GrU-M3D0ihjQ.wav.Lime", lpFilePart=0x0) returned 0x30 [0105.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0105.490] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.490] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.490] GetSystemMetrics (nIndex=42) returned 0 [0105.490] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.490] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Od32To.mp3.Lime", lpFilePart=0x0) returned 0x2a [0105.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0105.494] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.494] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.494] GetSystemMetrics (nIndex=42) returned 0 [0105.494] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.494] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Q0Ua0AHEpDpsIaUeq0.mp3.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Q0Ua0AHEpDpsIaUeq0.mp3.Lime", lpFilePart=0x0) returned 0x36 [0105.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0105.497] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.497] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.497] GetSystemMetrics (nIndex=42) returned 0 [0105.497] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.498] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\RaWNDw.m4a.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\RaWNDw.m4a.Lime", lpFilePart=0x0) returned 0x2a [0105.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0105.502] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.502] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.502] GetSystemMetrics (nIndex=42) returned 0 [0105.502] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.502] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\VDDGtgcph3p91P.m4a.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\VDDGtgcph3p91P.m4a.Lime", lpFilePart=0x0) returned 0x32 [0105.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0105.506] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.506] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.506] GetSystemMetrics (nIndex=42) returned 0 [0105.506] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.506] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\wAvRj0.mp3.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\wAvRj0.mp3.Lime", lpFilePart=0x0) returned 0x2a [0105.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\", nBufferLength=0x105, lpBuffer=0x119e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\", lpFilePart=0x0) returned 0x1b [0105.510] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.510] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.510] GetSystemMetrics (nIndex=42) returned 0 [0105.510] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.510] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\ZAGWB2vfm3Ox.wav.Lime", nBufferLength=0x105, lpBuffer=0x119e8fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\ZAGWB2vfm3Ox.wav.Lime", lpFilePart=0x0) returned 0x30 [0105.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS", lpFilePart=0x0) returned 0x20 [0105.515] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.515] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.515] GetSystemMetrics (nIndex=42) returned 0 [0105.515] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.515] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS\\23omQookgHHr8Y9yCu.wav.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS\\23omQookgHHr8Y9yCu.wav.Lime", lpFilePart=0x0) returned 0x3c [0105.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS", lpFilePart=0x0) returned 0x20 [0105.520] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.520] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.520] GetSystemMetrics (nIndex=42) returned 0 [0105.520] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.520] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS\\d6GeCZKDupueV.m4a.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS\\d6GeCZKDupueV.m4a.Lime", lpFilePart=0x0) returned 0x37 [0105.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS", lpFilePart=0x0) returned 0x20 [0105.524] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.524] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.524] GetSystemMetrics (nIndex=42) returned 0 [0105.524] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.524] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS\\iW-tjlMN4g.mp3.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS\\iW-tjlMN4g.mp3.Lime", lpFilePart=0x0) returned 0x34 [0105.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS", lpFilePart=0x0) returned 0x20 [0105.528] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.528] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.528] GetSystemMetrics (nIndex=42) returned 0 [0105.528] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.528] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS\\NxPD6NnA5bycZJdXb6UU.mp3.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS\\NxPD6NnA5bycZJdXb6UU.mp3.Lime", lpFilePart=0x0) returned 0x3e [0105.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS", lpFilePart=0x0) returned 0x20 [0105.531] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.531] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.531] GetSystemMetrics (nIndex=42) returned 0 [0105.531] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.531] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS\\QoT3Cric3j3.m4a.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS\\QoT3Cric3j3.m4a.Lime", lpFilePart=0x0) returned 0x35 [0105.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS", lpFilePart=0x0) returned 0x20 [0105.535] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.535] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.535] GetSystemMetrics (nIndex=42) returned 0 [0105.535] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.535] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS\\STXh2K2o0py6j.wav.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS\\STXh2K2o0py6j.wav.Lime", lpFilePart=0x0) returned 0x37 [0105.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS", lpFilePart=0x0) returned 0x20 [0105.541] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.541] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.541] GetSystemMetrics (nIndex=42) returned 0 [0105.541] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.541] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS\\_EgLSq.m4a.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\9APaS\\_EgLSq.m4a.Lime", lpFilePart=0x0) returned 0x30 [0105.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", lpFilePart=0x0) returned 0x28 [0105.547] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.547] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.547] GetSystemMetrics (nIndex=42) returned 0 [0105.547] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.547] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\9WnCwWbw3AszXV0F0Nw.wav.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\9WnCwWbw3AszXV0F0Nw.wav.Lime", lpFilePart=0x0) returned 0x45 [0105.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", lpFilePart=0x0) returned 0x28 [0105.551] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.552] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.552] GetSystemMetrics (nIndex=42) returned 0 [0105.552] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.552] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\dr67o-i2UkNNRIxE.m4a.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\dr67o-i2UkNNRIxE.m4a.Lime", lpFilePart=0x0) returned 0x42 [0105.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", lpFilePart=0x0) returned 0x28 [0105.555] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.555] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.555] GetSystemMetrics (nIndex=42) returned 0 [0105.555] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.555] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\dZosYMixd.m4a.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\dZosYMixd.m4a.Lime", lpFilePart=0x0) returned 0x3b [0105.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", lpFilePart=0x0) returned 0x28 [0105.558] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.558] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.558] GetSystemMetrics (nIndex=42) returned 0 [0105.558] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.558] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\ittEW9VaXDBQ.m4a.Lime", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\ittEW9VaXDBQ.m4a.Lime", lpFilePart=0x0) returned 0x3e [0105.563] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\ittEW9VaXDBQ.m4a", nBufferLength=0x105, lpBuffer=0x119e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\ittEW9VaXDBQ.m4a", lpFilePart=0x0) returned 0x39 [0105.563] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\ittEW9VaXDBQ.m4a" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe\\ittew9vaxdbq.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e0 [0105.564] GetFileType (hFile=0x2e0) returned 0x1 [0105.564] GetFileType (hFile=0x2e0) returned 0x1 [0105.564] WriteFile (in: hFile=0x2e0, lpBuffer=0x3eced60*, nNumberOfBytesToWrite=0x159a3, lpNumberOfBytesWritten=0x119ee70, lpOverlapped=0x0 | out: lpBuffer=0x3eced60*, lpNumberOfBytesWritten=0x119ee70*=0x159a3, lpOverlapped=0x0) returned 1 [0105.565] CloseHandle (hObject=0x2e0) returned 1 [0105.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", nBufferLength=0x105, lpBuffer=0x119e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", lpFilePart=0x0) returned 0x28 [0105.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", lpFilePart=0x0) returned 0x28 [0105.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", nBufferLength=0x105, lpBuffer=0x119e94c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", lpFilePart=0x0) returned 0x28 [0105.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x119e978, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0105.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", lpFilePart=0x0) returned 0x28 [0105.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10024a0, ftCreationTime.dwHighDateTime=0x1d34c69, ftLastAccessTime.dwLowDateTime=0x9c3ebda0, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c3ebda0, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", nBufferLength=0x105, lpBuffer=0x119e974, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", lpFilePart=0x0) returned 0x28 [0105.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10024a0, ftCreationTime.dwHighDateTime=0x1d34c69, ftLastAccessTime.dwLowDateTime=0x9c3ebda0, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c3ebda0, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music", nBufferLength=0x105, lpBuffer=0x119e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Music", lpFilePart=0x0) returned 0x1a [0105.567] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7730 [0105.567] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f76b0 [0105.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\ittEW9VaXDBQ.m4a.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe\\ittew9vaxdbq.m4a.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee8c | out: lpFileInformation=0x119ee8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ab7e1d, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70ab7e1d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70ab7e1d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x159b0)) returned 1 [0105.568] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\ittEW9VaXDBQ.m4a.Lime", lpFindFileData=0x119eb9c | out: lpFindFileData=0x119eb9c) returned 0x15f75f0 [0105.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\ittEW9VaXDBQ.m4a.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe\\ittew9vaxdbq.m4a.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eec4 | out: lpFileInformation=0x119eec4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ab7e1d, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70ab7e1d, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70ab7e1d, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x159b0)) returned 1 [0105.569] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\ittEW9VaXDBQ.m4a.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe\\ittew9vaxdbq.m4a.lime")) returned 1 [0105.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10024a0, ftCreationTime.dwHighDateTime=0x1d34c69, ftLastAccessTime.dwLowDateTime=0x9c41204f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c41204f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10024a0, ftCreationTime.dwHighDateTime=0x1d34c69, ftLastAccessTime.dwLowDateTime=0x9c41204f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c41204f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.572] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7670 [0105.572] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7070 [0105.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10024a0, ftCreationTime.dwHighDateTime=0x1d34c69, ftLastAccessTime.dwLowDateTime=0x9c41204f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c41204f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10024a0, ftCreationTime.dwHighDateTime=0x1d34c69, ftLastAccessTime.dwLowDateTime=0x9c41204f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c41204f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.573] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7230 [0105.573] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7070 [0105.574] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.574] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.574] GetSystemMetrics (nIndex=42) returned 0 [0105.574] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.574] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.574] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\lBl5MdKA70EZa0p4H.wav.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe\\lbl5mdka70eza0p4h.wav.lime"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e0 [0105.574] GetFileType (hFile=0x2e0) returned 0x1 [0105.574] GetFileType (hFile=0x2e0) returned 0x1 [0105.574] GetFileSize (in: hFile=0x2e0, lpFileSizeHigh=0x119eed4 | out: lpFileSizeHigh=0x119eed4*=0x0) returned 0x15200 [0105.574] ReadFile (in: hFile=0x2e0, lpBuffer=0x3ee4720, nNumberOfBytesToRead=0x15200, lpNumberOfBytesRead=0x119ee80, lpOverlapped=0x0 | out: lpBuffer=0x3ee4720*, lpNumberOfBytesRead=0x119ee80*=0x15200, lpOverlapped=0x0) returned 1 [0105.575] CloseHandle (hObject=0x2e0) returned 1 [0105.577] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\lBl5MdKA70EZa0p4H.wav" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe\\lbl5mdka70eza0p4h.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e0 [0105.578] GetFileType (hFile=0x2e0) returned 0x1 [0105.578] GetFileType (hFile=0x2e0) returned 0x1 [0105.578] WriteFile (in: hFile=0x2e0, lpBuffer=0x3f0eb60*, nNumberOfBytesToWrite=0x151fd, lpNumberOfBytesWritten=0x119ee70, lpOverlapped=0x0 | out: lpBuffer=0x3f0eb60*, lpNumberOfBytesWritten=0x119ee70*=0x151fd, lpOverlapped=0x0) returned 1 [0105.579] CloseHandle (hObject=0x2e0) returned 1 [0105.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10024a0, ftCreationTime.dwHighDateTime=0x1d34c69, ftLastAccessTime.dwLowDateTime=0x9c41204f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c41204f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10024a0, ftCreationTime.dwHighDateTime=0x1d34c69, ftLastAccessTime.dwLowDateTime=0x9c41204f, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c41204f, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.581] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f74f0 [0105.581] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f74b0 [0105.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\lBl5MdKA70EZa0p4H.wav.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe\\lbl5mdka70eza0p4h.wav.lime"), fInfoLevelId=0x0, lpFileInformation=0x119ee8c | out: lpFileInformation=0x119ee8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ade035, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70ade035, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70ade035, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x15200)) returned 1 [0105.582] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\lBl5MdKA70EZa0p4H.wav.Lime", lpFindFileData=0x119eb9c | out: lpFindFileData=0x119eb9c) returned 0x15f76b0 [0105.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\lBl5MdKA70EZa0p4H.wav.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe\\lbl5mdka70eza0p4h.wav.lime"), fInfoLevelId=0x0, lpFileInformation=0x119eec4 | out: lpFileInformation=0x119eec4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ade035, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x70ade035, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x70ade035, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x15200)) returned 1 [0105.583] DeleteFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\lBl5MdKA70EZa0p4H.wav.Lime" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe\\lbl5mdka70eza0p4h.wav.lime")) returned 1 [0105.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe"), fInfoLevelId=0x0, lpFileInformation=0x119ee70 | out: lpFileInformation=0x119ee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10024a0, ftCreationTime.dwHighDateTime=0x1d34c69, ftLastAccessTime.dwLowDateTime=0x9c438388, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c438388, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe" (normalized: "c:\\users\\5jghkoaofdp\\music\\fedb6bw2fnxwe"), fInfoLevelId=0x0, lpFileInformation=0x119ee64 | out: lpFileInformation=0x119ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10024a0, ftCreationTime.dwHighDateTime=0x1d34c69, ftLastAccessTime.dwLowDateTime=0x9c438388, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x9c438388, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.584] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f6ff0 [0105.584] FindClose (in: hFindFile=0x15f6ff0 | out: hFindFile=0x15f6ff0) returned 1 [0105.584] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Music\\Fedb6bw2FnxWe\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f76f0 [0105.585] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.585] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.585] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.585] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.585] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.585] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.585] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.585] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.585] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.585] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.585] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.585] FindClose (in: hFindFile=0x15f76f0 | out: hFindFile=0x15f76f0) returned 1 [0105.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.586] FindNextFileW (in: hFindFile=0x15f72f0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.586] FindClose (in: hFindFile=0x15f72f0 | out: hFindFile=0x15f72f0) returned 1 [0105.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.586] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.586] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.586] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.586] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.587] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.587] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.587] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.587] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.587] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.587] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.587] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.587] FindClose (in: hFindFile=0x15f74b0 | out: hFindFile=0x15f74b0) returned 1 [0105.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.587] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.587] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.587] GetSystemMetrics (nIndex=42) returned 0 [0105.587] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.587] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0105.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb8) returned 1 [0105.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb4) returned 1 [0105.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.593] FindNextFileW (in: hFindFile=0x15f74f0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.593] FindClose (in: hFindFile=0x15f74f0 | out: hFindFile=0x15f74f0) returned 1 [0105.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.594] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.594] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.594] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.594] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.594] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.594] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.594] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.594] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.594] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.594] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.595] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.595] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.595] FindClose (in: hFindFile=0x15f71f0 | out: hFindFile=0x15f71f0) returned 1 [0105.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0105.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee74) returned 1 [0105.595] FindNextFileW (in: hFindFile=0x15f7370, lpFindFileData=0x119ebac | out: lpFindFileData=0x119ebac) returned 0 [0105.595] FindClose (in: hFindFile=0x15f7370 | out: hFindFile=0x15f7370) returned 1 [0105.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee34) returned 1 [0105.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee40) returned 1 [0105.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee48) returned 1 [0105.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee44) returned 1 [0105.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.596] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.596] FindClose (in: hFindFile=0x15f7070 | out: hFindFile=0x15f7070) returned 1 [0105.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.597] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.597] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.597] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.597] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.597] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.597] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.597] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.597] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.597] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.597] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.597] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.598] FindClose (in: hFindFile=0x15f73b0 | out: hFindFile=0x15f73b0) returned 1 [0105.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.598] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.598] FindClose (in: hFindFile=0x15f71f0 | out: hFindFile=0x15f71f0) returned 1 [0105.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.598] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.598] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.598] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.599] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.599] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.599] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.599] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.599] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.599] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.599] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.599] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.599] FindClose (in: hFindFile=0x15f71b0 | out: hFindFile=0x15f71b0) returned 1 [0105.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.599] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.599] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.599] GetSystemMetrics (nIndex=42) returned 0 [0105.599] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.599] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0105.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb8) returned 1 [0105.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb4) returned 1 [0105.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.603] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.603] FindClose (in: hFindFile=0x15f76f0 | out: hFindFile=0x15f76f0) returned 1 [0105.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.603] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.603] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.603] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.604] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.604] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.604] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.604] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.604] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.604] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.604] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.604] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.604] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.604] FindClose (in: hFindFile=0x15f7230 | out: hFindFile=0x15f7230) returned 1 [0105.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0105.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee74) returned 1 [0105.605] FindNextFileW (in: hFindFile=0x15f7430, lpFindFileData=0x119ebac | out: lpFindFileData=0x119ebac) returned 0 [0105.605] FindClose (in: hFindFile=0x15f7430 | out: hFindFile=0x15f7430) returned 1 [0105.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee34) returned 1 [0105.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee40) returned 1 [0105.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee48) returned 1 [0105.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee44) returned 1 [0105.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.606] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.606] FindClose (in: hFindFile=0x15f75b0 | out: hFindFile=0x15f75b0) returned 1 [0105.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.606] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.606] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.606] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.606] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.606] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.606] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.607] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.607] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.607] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.607] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.607] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.607] FindClose (in: hFindFile=0x15f73f0 | out: hFindFile=0x15f73f0) returned 1 [0105.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.607] FindNextFileW (in: hFindFile=0x15f70b0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.607] FindClose (in: hFindFile=0x15f70b0 | out: hFindFile=0x15f70b0) returned 1 [0105.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.608] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.608] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.608] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.608] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.608] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.608] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.608] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.608] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.608] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.608] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.609] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.609] FindClose (in: hFindFile=0x15f7170 | out: hFindFile=0x15f7170) returned 1 [0105.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.609] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.609] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.609] GetSystemMetrics (nIndex=42) returned 0 [0105.609] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.609] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0105.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb8) returned 1 [0105.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb4) returned 1 [0105.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.613] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.613] FindClose (in: hFindFile=0x15f7070 | out: hFindFile=0x15f7070) returned 1 [0105.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.613] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.613] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.613] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.613] FindNextFileW (in: hFindFile=0x15f71b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0105.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee74) returned 1 [0105.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee34) returned 1 [0105.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee40) returned 1 [0105.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee48) returned 1 [0105.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee44) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.616] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.616] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.616] GetSystemMetrics (nIndex=42) returned 0 [0105.616] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.616] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0105.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb8) returned 1 [0105.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb4) returned 1 [0105.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0105.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee74) returned 1 [0105.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee34) returned 1 [0105.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee40) returned 1 [0105.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee48) returned 1 [0105.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee44) returned 1 [0105.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee34) returned 1 [0105.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee30) returned 1 [0105.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee28) returned 1 [0105.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee98) returned 1 [0105.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee64) returned 1 [0105.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eecc) returned 1 [0105.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee8c) returned 1 [0105.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee98) returned 1 [0105.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.625] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.625] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.626] GetSystemMetrics (nIndex=42) returned 0 [0105.626] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.626] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0105.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb8) returned 1 [0105.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb4) returned 1 [0105.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee10) returned 1 [0105.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0105.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee74) returned 1 [0105.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee34) returned 1 [0105.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee40) returned 1 [0105.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee48) returned 1 [0105.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee44) returned 1 [0105.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edf4) returned 1 [0105.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edf0) returned 1 [0105.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ede8) returned 1 [0105.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0105.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee58) returned 1 [0105.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0105.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee24) returned 1 [0105.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee8c) returned 1 [0105.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee4c) returned 1 [0105.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee58) returned 1 [0105.632] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.632] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.632] GetSystemMetrics (nIndex=42) returned 0 [0105.632] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.632] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd0) returned 1 [0105.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0105.637] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.637] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.637] GetSystemMetrics (nIndex=42) returned 0 [0105.637] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.637] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.640] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.640] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.640] GetSystemMetrics (nIndex=42) returned 0 [0105.640] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.640] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.646] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.646] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.646] GetSystemMetrics (nIndex=42) returned 0 [0105.646] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.646] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.649] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.649] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.649] GetSystemMetrics (nIndex=42) returned 0 [0105.649] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.649] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.654] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.654] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.654] GetSystemMetrics (nIndex=42) returned 0 [0105.654] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.654] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.661] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.661] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.661] GetSystemMetrics (nIndex=42) returned 0 [0105.661] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.661] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.666] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.666] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.666] GetSystemMetrics (nIndex=42) returned 0 [0105.666] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.666] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.672] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.673] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.673] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.673] GetSystemMetrics (nIndex=42) returned 0 [0105.673] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.673] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.685] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.685] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.685] GetSystemMetrics (nIndex=42) returned 0 [0105.685] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.685] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.690] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.690] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.690] GetSystemMetrics (nIndex=42) returned 0 [0105.690] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.690] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.694] CoTaskMemAlloc (cb=0x20c) returned 0x1624b30 [0105.694] SHGetFolderPathW (in: hwnd=0x0, csidl=14, hToken=0x0, dwFlags=0x0, pszPath=0x1624b30 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Videos") returned 0x0 [0105.694] CoTaskMemFree (pv=0x1624b30) [0105.695] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.695] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.695] GetSystemMetrics (nIndex=42) returned 0 [0105.695] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.695] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.701] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.701] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.701] GetSystemMetrics (nIndex=42) returned 0 [0105.701] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.701] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.706] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.706] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.706] GetSystemMetrics (nIndex=42) returned 0 [0105.706] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.706] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.708] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.708] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.708] GetSystemMetrics (nIndex=42) returned 0 [0105.708] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.708] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.713] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.713] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.713] GetSystemMetrics (nIndex=42) returned 0 [0105.713] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.713] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.718] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.718] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.718] GetSystemMetrics (nIndex=42) returned 0 [0105.718] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.718] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.723] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.723] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.723] GetSystemMetrics (nIndex=42) returned 0 [0105.723] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.723] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.748] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.748] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.749] GetSystemMetrics (nIndex=42) returned 0 [0105.749] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.749] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.758] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.758] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.758] GetSystemMetrics (nIndex=42) returned 0 [0105.758] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.758] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.762] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.762] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.762] GetSystemMetrics (nIndex=42) returned 0 [0105.762] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.762] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.772] ReadFile (in: hFile=0x2e4, lpBuffer=0x3eb9390, nNumberOfBytesToRead=0x18970, lpNumberOfBytesRead=0x119ee80, lpOverlapped=0x0 | out: lpBuffer=0x3eb9390*, lpNumberOfBytesRead=0x119ee80*=0x18970, lpOverlapped=0x0) returned 1 [0105.778] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.778] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.778] GetSystemMetrics (nIndex=42) returned 0 [0105.779] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.779] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.782] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.782] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.782] GetSystemMetrics (nIndex=42) returned 0 [0105.782] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.782] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.786] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.786] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.786] GetSystemMetrics (nIndex=42) returned 0 [0105.786] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.786] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.790] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.790] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.790] GetSystemMetrics (nIndex=42) returned 0 [0105.790] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.790] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.795] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.795] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.795] GetSystemMetrics (nIndex=42) returned 0 [0105.795] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.796] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.802] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.802] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.802] GetSystemMetrics (nIndex=42) returned 0 [0105.802] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.802] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.806] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.806] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.806] GetSystemMetrics (nIndex=42) returned 0 [0105.806] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.806] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.813] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.813] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.813] GetSystemMetrics (nIndex=42) returned 0 [0105.813] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.813] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.820] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.820] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.820] GetSystemMetrics (nIndex=42) returned 0 [0105.820] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.820] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.823] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.823] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.823] GetSystemMetrics (nIndex=42) returned 0 [0105.823] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.823] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.827] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.827] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.827] GetSystemMetrics (nIndex=42) returned 0 [0105.827] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119eddc, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.827] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119eddc) returned 0x32 [0105.838] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.838] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.838] GetSystemMetrics (nIndex=42) returned 0 [0105.838] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.838] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.842] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.842] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.842] GetSystemMetrics (nIndex=42) returned 0 [0105.842] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.842] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.846] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.846] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.846] GetSystemMetrics (nIndex=42) returned 0 [0105.846] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.846] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.850] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.850] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.850] GetSystemMetrics (nIndex=42) returned 0 [0105.850] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.850] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.855] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.855] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.855] GetSystemMetrics (nIndex=42) returned 0 [0105.855] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.855] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.861] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.861] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.861] GetSystemMetrics (nIndex=42) returned 0 [0105.861] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.861] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.866] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.866] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.866] GetSystemMetrics (nIndex=42) returned 0 [0105.866] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.866] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.871] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.871] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.871] GetSystemMetrics (nIndex=42) returned 0 [0105.871] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.871] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.878] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.878] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.878] GetSystemMetrics (nIndex=42) returned 0 [0105.878] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.878] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.883] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.883] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.883] GetSystemMetrics (nIndex=42) returned 0 [0105.883] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.883] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.892] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.893] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.893] GetSystemMetrics (nIndex=42) returned 0 [0105.893] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.893] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.901] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.901] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\t9pEUPxEPhsNGJS7", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7070 [0105.901] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.901] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\t9pEUPxEPhsNGJS7\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f73b0 [0105.901] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.901] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.901] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.901] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.901] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.902] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.902] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.902] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.902] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.902] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.902] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.902] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.902] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.902] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.902] GetSystemMetrics (nIndex=42) returned 0 [0105.902] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.902] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.909] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\t9pEUPxEPhsNGJS7", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f74b0 [0105.909] FindNextFileW (in: hFindFile=0x15f74b0, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.909] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\t9pEUPxEPhsNGJS7\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f7070 [0105.909] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.909] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.909] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.909] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.909] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.909] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.909] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.909] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.909] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.910] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.910] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.910] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.910] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 0 [0105.910] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\t9pEUPxEPhsNGJS7\\gN4bw67_hL4AzA.swf.Lime", lpFindFileData=0x119eb9c | out: lpFindFileData=0x119eb9c) returned 0x15f7430 [0105.910] FindNextFileW (in: hFindFile=0x15f7430, lpFindFileData=0x119ebac | out: lpFindFileData=0x119ebac) returned 0 [0105.911] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\t9pEUPxEPhsNGJS7", lpFindFileData=0x119eb80 | out: lpFindFileData=0x119eb80) returned 0x15f7570 [0105.911] FindNextFileW (in: hFindFile=0x15f7570, lpFindFileData=0x119eb90 | out: lpFindFileData=0x119eb90) returned 0 [0105.911] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Videos\\t9pEUPxEPhsNGJS7\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f75b0 [0105.911] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.911] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.911] FindNextFileW (in: hFindFile=0x15f75b0, lpFindFileData=0x119ebc4 | out: lpFindFileData=0x119ebc4) returned 1 [0105.912] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.912] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.912] GetSystemMetrics (nIndex=42) returned 0 [0105.912] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.912] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.915] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.916] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.916] GetSystemMetrics (nIndex=42) returned 0 [0105.916] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.916] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.923] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.923] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.923] GetSystemMetrics (nIndex=42) returned 0 [0105.923] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.923] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.930] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.930] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.930] GetSystemMetrics (nIndex=42) returned 0 [0105.930] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.930] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.935] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.935] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.935] GetSystemMetrics (nIndex=42) returned 0 [0105.935] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.935] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.939] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.939] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.939] GetSystemMetrics (nIndex=42) returned 0 [0105.939] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.939] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.945] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.945] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.945] GetSystemMetrics (nIndex=42) returned 0 [0105.945] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.945] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.949] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.949] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.949] GetSystemMetrics (nIndex=42) returned 0 [0105.949] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee1c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.949] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee1c) returned 0x32 [0105.964] CoTaskMemAlloc (cb=0x20c) returned 0x1624b30 [0105.964] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1624b30 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Desktop") returned 0x0 [0105.964] CoTaskMemFree (pv=0x1624b30) [0105.965] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.965] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.965] GetSystemMetrics (nIndex=42) returned 0 [0105.965] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.965] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.971] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.971] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.971] GetSystemMetrics (nIndex=42) returned 0 [0105.971] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.971] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.977] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.977] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.977] GetSystemMetrics (nIndex=42) returned 0 [0105.977] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.977] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.985] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.985] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.985] GetSystemMetrics (nIndex=42) returned 0 [0105.985] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.985] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.990] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.990] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.990] GetSystemMetrics (nIndex=42) returned 0 [0105.990] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.990] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0105.999] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0105.999] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0105.999] GetSystemMetrics (nIndex=42) returned 0 [0105.999] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0105.999] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0106.003] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0106.003] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0106.003] GetSystemMetrics (nIndex=42) returned 0 [0106.003] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0106.003] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0106.010] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0106.010] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0106.010] GetSystemMetrics (nIndex=42) returned 0 [0106.010] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0106.010] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0106.016] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0106.016] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0106.016] GetSystemMetrics (nIndex=42) returned 0 [0106.016] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0106.016] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0106.021] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0106.021] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0106.021] GetSystemMetrics (nIndex=42) returned 0 [0106.021] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0106.021] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0106.025] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0106.025] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0106.025] GetSystemMetrics (nIndex=42) returned 0 [0106.025] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0106.025] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0106.030] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0106.030] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0106.030] GetSystemMetrics (nIndex=42) returned 0 [0106.030] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0106.030] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0106.034] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0106.034] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0106.034] GetSystemMetrics (nIndex=42) returned 0 [0106.034] GetWindowTextW (in: hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51 | out: lpString="1d2HVTNml07CJA2d50LKn4HpWJfFTEoY9hQFPWNa5TcfDAn80F") returned 50 [0106.034] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xd, wParam=0x33, lParam=0x119ee5c) returned 0x32 [0106.037] GetWindowTextLengthW (hWnd=0x102b8) returned 50 [0106.037] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x32 [0106.037] GetSystemMetrics (nIndex=42) returned 0 [0106.037] GetWindowTextW (hWnd=0x102b8, lpString=0x119ee5c, nMaxCount=51) [0106.093] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119ec04 | out: lpFindFileData=0x119ec04) returned 1 [0106.131] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\c OpBv-sTs\\*", lpFindFileData=0x119ebb4 | out: lpFindFileData=0x119ebb4) returned 0x15f72b0 [0106.174] CoTaskMemAlloc (cb=0x20c) returned 0x1624b30 [0106.174] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x1624b30 | out: pszPath="C:\\Users\\5JgHKoaOfdp") returned 0x0 [0106.176] CoTaskMemFree (pv=0x1624b30) [0106.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e90c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData", lpFilePart=0x0) returned 0x1c [0106.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0106.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x119ee30 | out: lpFileInformation=0x119ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8bf6e89, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0106.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0106.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0106.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x119ee24 | out: lpFileInformation=0x119ee24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8bf6e89, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0106.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0106.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0106.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData", nBufferLength=0x105, lpBuffer=0x119e900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData", lpFilePart=0x0) returned 0x1c [0106.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.186] GetFullPathNameW (in: lpFileName="Local", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Local", lpFilePart=0x0) returned 0x22 [0106.186] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFindFileData=0x119eb40 | out: lpFindFileData=0x119eb40) returned 0x15f73b0 [0106.186] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119eb50 | out: lpFindFileData=0x119eb50) returned 0 [0106.186] FindClose (in: hFindFile=0x15f73b0 | out: hFindFile=0x15f73b0) returned 1 [0106.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0106.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0106.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\.", nBufferLength=0x105, lpBuffer=0x119e8c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0106.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x119e8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\", lpFilePart=0x0) returned 0x23 [0106.186] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\*", lpFindFileData=0x119eb74 | out: lpFindFileData=0x119eb74) returned 0x15f7130 [0106.186] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.186] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.186] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.186] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.187] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.187] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.187] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.187] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.187] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.187] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.187] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.187] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.187] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.187] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.187] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.187] FindNextFileW (in: hFindFile=0x15f7130, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 0 [0106.187] FindClose (in: hFindFile=0x15f7130 | out: hFindFile=0x15f7130) returned 1 [0106.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0106.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0106.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0106.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\emiesitelist"), fInfoLevelId=0x0, lpFileInformation=0x119edf0 | out: lpFileInformation=0x119edf0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd7412f5c, ftCreationTime.dwHighDateTime=0x1d359f1, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0106.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0106.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\emiesitelist"), fInfoLevelId=0x0, lpFileInformation=0x119ede4 | out: lpFileInformation=0x119ede4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd7412f5c, ftCreationTime.dwHighDateTime=0x1d359f1, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0106.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0106.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.189] GetFullPathNameW (in: lpFileName="EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\EmieSiteList", lpFilePart=0x0) returned 0x29 [0106.189] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFindFileData=0x119eb00 | out: lpFindFileData=0x119eb00) returned 0x15f7370 [0106.189] FindNextFileW (in: hFindFile=0x15f7370, lpFindFileData=0x119eb10 | out: lpFindFileData=0x119eb10) returned 0 [0106.189] FindClose (in: hFindFile=0x15f7370 | out: hFindFile=0x15f7370) returned 1 [0106.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0106.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0106.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList\\.", nBufferLength=0x105, lpBuffer=0x119e888, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0106.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList\\", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList\\", lpFilePart=0x0) returned 0x30 [0106.189] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList\\*", lpFindFileData=0x119eb34 | out: lpFindFileData=0x119eb34) returned 0x15f7170 [0106.189] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.189] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.189] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 0 [0106.189] FindClose (in: hFindFile=0x15f7170 | out: hFindFile=0x15f7170) returned 1 [0106.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0106.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0106.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0106.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\emiesitelist"), fInfoLevelId=0x0, lpFileInformation=0x119edf0 | out: lpFileInformation=0x119edf0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd7412f5c, ftCreationTime.dwHighDateTime=0x1d359f1, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0106.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0106.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\emiesitelist"), fInfoLevelId=0x0, lpFileInformation=0x119ede4 | out: lpFileInformation=0x119ede4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd7412f5c, ftCreationTime.dwHighDateTime=0x1d359f1, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0106.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0106.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.190] GetFullPathNameW (in: lpFileName="EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\EmieSiteList", lpFilePart=0x0) returned 0x29 [0106.190] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFindFileData=0x119eb00 | out: lpFindFileData=0x119eb00) returned 0x15f7070 [0106.190] FindNextFileW (in: hFindFile=0x15f7070, lpFindFileData=0x119eb10 | out: lpFindFileData=0x119eb10) returned 0 [0106.190] FindClose (in: hFindFile=0x15f7070 | out: hFindFile=0x15f7070) returned 1 [0106.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0106.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0106.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList\\.", nBufferLength=0x105, lpBuffer=0x119e888, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0106.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList\\", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList\\", lpFilePart=0x0) returned 0x30 [0106.191] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList\\*", lpFindFileData=0x119eb34 | out: lpFindFileData=0x119eb34) returned 0x15f73b0 [0106.191] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.191] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.191] FindNextFileW (in: hFindFile=0x15f73b0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 0 [0106.191] FindClose (in: hFindFile=0x15f73b0 | out: hFindFile=0x15f73b0) returned 1 [0106.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0106.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0106.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0106.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\emiesitelist"), fInfoLevelId=0x0, lpFileInformation=0x119edf0 | out: lpFileInformation=0x119edf0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd7412f5c, ftCreationTime.dwHighDateTime=0x1d359f1, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0106.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0106.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\emiesitelist"), fInfoLevelId=0x0, lpFileInformation=0x119ede4 | out: lpFileInformation=0x119ede4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd7412f5c, ftCreationTime.dwHighDateTime=0x1d359f1, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0106.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0106.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.192] GetFullPathNameW (in: lpFileName="EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\EmieSiteList", lpFilePart=0x0) returned 0x29 [0106.192] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFindFileData=0x119eb00 | out: lpFindFileData=0x119eb00) returned 0x15f72f0 [0106.192] FindNextFileW (in: hFindFile=0x15f72f0, lpFindFileData=0x119eb10 | out: lpFindFileData=0x119eb10) returned 0 [0106.192] FindClose (in: hFindFile=0x15f72f0 | out: hFindFile=0x15f72f0) returned 1 [0106.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0106.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0106.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList\\.", nBufferLength=0x105, lpBuffer=0x119e888, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0106.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList", lpFilePart=0x0) returned 0x2f [0106.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList\\", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList\\", lpFilePart=0x0) returned 0x30 [0106.192] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieSiteList\\*", lpFindFileData=0x119eb34 | out: lpFindFileData=0x119eb34) returned 0x15f71f0 [0106.192] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.192] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.193] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 0 [0106.193] FindClose (in: hFindFile=0x15f71f0 | out: hFindFile=0x15f71f0) returned 1 [0106.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0106.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0106.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e90c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData", lpFilePart=0x0) returned 0x1c [0106.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0106.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x119ee30 | out: lpFileInformation=0x119ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8bf6e89, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0106.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0106.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0106.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x119ee24 | out: lpFileInformation=0x119ee24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8bf6e89, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0106.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0106.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0106.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData", nBufferLength=0x105, lpBuffer=0x119e900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData", lpFilePart=0x0) returned 0x1c [0106.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.193] GetFullPathNameW (in: lpFileName="Local", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Local", lpFilePart=0x0) returned 0x22 [0106.193] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFindFileData=0x119eb40 | out: lpFindFileData=0x119eb40) returned 0x15f7570 [0106.193] FindNextFileW (in: hFindFile=0x15f7570, lpFindFileData=0x119eb50 | out: lpFindFileData=0x119eb50) returned 0 [0106.193] FindClose (in: hFindFile=0x15f7570 | out: hFindFile=0x15f7570) returned 1 [0106.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0106.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0106.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\.", nBufferLength=0x105, lpBuffer=0x119e8c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0106.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x119e8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\", lpFilePart=0x0) returned 0x23 [0106.194] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\*", lpFindFileData=0x119eb74 | out: lpFindFileData=0x119eb74) returned 0x15f7230 [0106.194] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.194] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.194] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.194] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.194] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.194] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.194] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.194] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.194] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.194] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.195] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.195] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.195] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.195] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.195] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.195] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 0 [0106.195] FindClose (in: hFindFile=0x15f7230 | out: hFindFile=0x15f7230) returned 1 [0106.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0106.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0106.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0106.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\emieuserlist"), fInfoLevelId=0x0, lpFileInformation=0x119edf0 | out: lpFileInformation=0x119edf0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd7412f5c, ftCreationTime.dwHighDateTime=0x1d359f1, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0106.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0106.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\emieuserlist"), fInfoLevelId=0x0, lpFileInformation=0x119ede4 | out: lpFileInformation=0x119ede4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd7412f5c, ftCreationTime.dwHighDateTime=0x1d359f1, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0106.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0106.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.196] GetFullPathNameW (in: lpFileName="EmieUserList", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\EmieUserList", lpFilePart=0x0) returned 0x29 [0106.196] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFindFileData=0x119eb00 | out: lpFindFileData=0x119eb00) returned 0x15f7370 [0106.196] FindNextFileW (in: hFindFile=0x15f7370, lpFindFileData=0x119eb10 | out: lpFindFileData=0x119eb10) returned 0 [0106.196] FindClose (in: hFindFile=0x15f7370 | out: hFindFile=0x15f7370) returned 1 [0106.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0106.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0106.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList\\.", nBufferLength=0x105, lpBuffer=0x119e888, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0106.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList\\", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList\\", lpFilePart=0x0) returned 0x30 [0106.196] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList\\*", lpFindFileData=0x119eb34 | out: lpFindFileData=0x119eb34) returned 0x15f7230 [0106.197] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.197] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.197] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 0 [0106.197] FindClose (in: hFindFile=0x15f7230 | out: hFindFile=0x15f7230) returned 1 [0106.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0106.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0106.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0106.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\emieuserlist"), fInfoLevelId=0x0, lpFileInformation=0x119edf0 | out: lpFileInformation=0x119edf0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd7412f5c, ftCreationTime.dwHighDateTime=0x1d359f1, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0106.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0106.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\emieuserlist"), fInfoLevelId=0x0, lpFileInformation=0x119ede4 | out: lpFileInformation=0x119ede4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd7412f5c, ftCreationTime.dwHighDateTime=0x1d359f1, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0106.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0106.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.197] GetFullPathNameW (in: lpFileName="EmieUserList", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\EmieUserList", lpFilePart=0x0) returned 0x29 [0106.197] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFindFileData=0x119eb00 | out: lpFindFileData=0x119eb00) returned 0x15f7770 [0106.198] FindNextFileW (in: hFindFile=0x15f7770, lpFindFileData=0x119eb10 | out: lpFindFileData=0x119eb10) returned 0 [0106.198] FindClose (in: hFindFile=0x15f7770 | out: hFindFile=0x15f7770) returned 1 [0106.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0106.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0106.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList\\.", nBufferLength=0x105, lpBuffer=0x119e888, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0106.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList\\", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList\\", lpFilePart=0x0) returned 0x30 [0106.198] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList\\*", lpFindFileData=0x119eb34 | out: lpFindFileData=0x119eb34) returned 0x15f76f0 [0106.198] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.198] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.198] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 0 [0106.198] FindClose (in: hFindFile=0x15f76f0 | out: hFindFile=0x15f76f0) returned 1 [0106.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0106.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0106.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0106.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\emieuserlist"), fInfoLevelId=0x0, lpFileInformation=0x119edf0 | out: lpFileInformation=0x119edf0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd7412f5c, ftCreationTime.dwHighDateTime=0x1d359f1, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0106.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0106.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\emieuserlist"), fInfoLevelId=0x0, lpFileInformation=0x119ede4 | out: lpFileInformation=0x119ede4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd7412f5c, ftCreationTime.dwHighDateTime=0x1d359f1, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0106.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0106.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.199] GetFullPathNameW (in: lpFileName="EmieUserList", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\EmieUserList", lpFilePart=0x0) returned 0x29 [0106.199] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFindFileData=0x119eb00 | out: lpFindFileData=0x119eb00) returned 0x15f76f0 [0106.199] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119eb10 | out: lpFindFileData=0x119eb10) returned 0 [0106.199] FindClose (in: hFindFile=0x15f76f0 | out: hFindFile=0x15f76f0) returned 1 [0106.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0106.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0106.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList\\.", nBufferLength=0x105, lpBuffer=0x119e888, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0106.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList", lpFilePart=0x0) returned 0x2f [0106.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList\\", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList\\", lpFilePart=0x0) returned 0x30 [0106.199] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\EmieUserList\\*", lpFindFileData=0x119eb34 | out: lpFindFileData=0x119eb34) returned 0x15f7570 [0106.199] FindNextFileW (in: hFindFile=0x15f7570, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.199] FindNextFileW (in: hFindFile=0x15f7570, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.200] FindNextFileW (in: hFindFile=0x15f7570, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 0 [0106.200] FindClose (in: hFindFile=0x15f7570 | out: hFindFile=0x15f7570) returned 1 [0106.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0106.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0106.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e90c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData", nBufferLength=0x105, lpBuffer=0x119e938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData", lpFilePart=0x0) returned 0x1c [0106.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edb4) returned 1 [0106.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x119ee30 | out: lpFileInformation=0x119ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8bf6e89, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0106.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edb0) returned 1 [0106.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eda8) returned 1 [0106.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x119ee24 | out: lpFileInformation=0x119ee24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8bf6e89, ftCreationTime.dwHighDateTime=0x1d2ced7, ftLastAccessTime.dwLowDateTime=0xd7412f5c, ftLastAccessTime.dwHighDateTime=0x1d359f1, ftLastWriteTime.dwLowDateTime=0xd7412f5c, ftLastWriteTime.dwHighDateTime=0x1d359f1, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0106.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0106.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee18) returned 1 [0106.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData", nBufferLength=0x105, lpBuffer=0x119e900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData", lpFilePart=0x0) returned 0x1c [0106.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.200] GetFullPathNameW (in: lpFileName="Local", nBufferLength=0x105, lpBuffer=0x119e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Local", lpFilePart=0x0) returned 0x22 [0106.200] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFindFileData=0x119eb40 | out: lpFindFileData=0x119eb40) returned 0x15f7470 [0106.200] FindNextFileW (in: hFindFile=0x15f7470, lpFindFileData=0x119eb50 | out: lpFindFileData=0x119eb50) returned 0 [0106.200] FindClose (in: hFindFile=0x15f7470 | out: hFindFile=0x15f7470) returned 1 [0106.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0106.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ede4) returned 1 [0106.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\.", nBufferLength=0x105, lpBuffer=0x119e8c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee4c) returned 1 [0106.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x119e8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\", lpFilePart=0x0) returned 0x23 [0106.201] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\*", lpFindFileData=0x119eb74 | out: lpFindFileData=0x119eb74) returned 0x15f7670 [0106.201] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.201] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.201] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.201] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.201] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.201] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.201] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.201] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.201] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.201] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.201] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.201] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.202] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.202] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.202] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 1 [0106.202] FindNextFileW (in: hFindFile=0x15f7670, lpFindFileData=0x119eb84 | out: lpFindFileData=0x119eb84) returned 0 [0106.202] FindClose (in: hFindFile=0x15f7670 | out: hFindFile=0x15f7670) returned 1 [0106.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee0c) returned 1 [0106.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ee18) returned 1 [0106.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0106.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\google"), fInfoLevelId=0x0, lpFileInformation=0x119edf0 | out: lpFileInformation=0x119edf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98816532, ftCreationTime.dwHighDateTime=0x1d2d452, ftLastAccessTime.dwLowDateTime=0xa7e9beea, ftLastAccessTime.dwHighDateTime=0x1d2d452, ftLastWriteTime.dwLowDateTime=0xa7e9beea, ftLastWriteTime.dwHighDateTime=0x1d2d452, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0106.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0106.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\google"), fInfoLevelId=0x0, lpFileInformation=0x119ede4 | out: lpFileInformation=0x119ede4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98816532, ftCreationTime.dwHighDateTime=0x1d2d452, ftLastAccessTime.dwLowDateTime=0xa7e9beea, ftLastAccessTime.dwHighDateTime=0x1d2d452, ftLastWriteTime.dwLowDateTime=0xa7e9beea, ftLastWriteTime.dwHighDateTime=0x1d2d452, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0106.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0106.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.202] GetFullPathNameW (in: lpFileName="Google", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Google", lpFilePart=0x0) returned 0x23 [0106.202] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFindFileData=0x119eb00 | out: lpFindFileData=0x119eb00) returned 0x15f7230 [0106.203] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119eb10 | out: lpFindFileData=0x119eb10) returned 0 [0106.203] FindClose (in: hFindFile=0x15f7230 | out: hFindFile=0x15f7230) returned 1 [0106.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0106.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0106.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\.", nBufferLength=0x105, lpBuffer=0x119e888, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0106.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\", lpFilePart=0x0) returned 0x2a [0106.203] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\*", lpFindFileData=0x119eb34 | out: lpFindFileData=0x119eb34) returned 0x15f71f0 [0106.203] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.203] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.203] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.203] FindNextFileW (in: hFindFile=0x15f71f0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 0 [0106.203] FindClose (in: hFindFile=0x15f71f0 | out: hFindFile=0x15f71f0) returned 1 [0106.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0106.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0106.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0106.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\google"), fInfoLevelId=0x0, lpFileInformation=0x119edf0 | out: lpFileInformation=0x119edf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98816532, ftCreationTime.dwHighDateTime=0x1d2d452, ftLastAccessTime.dwLowDateTime=0xa7e9beea, ftLastAccessTime.dwHighDateTime=0x1d2d452, ftLastWriteTime.dwLowDateTime=0xa7e9beea, ftLastWriteTime.dwHighDateTime=0x1d2d452, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0106.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0106.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\google"), fInfoLevelId=0x0, lpFileInformation=0x119ede4 | out: lpFileInformation=0x119ede4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98816532, ftCreationTime.dwHighDateTime=0x1d2d452, ftLastAccessTime.dwLowDateTime=0xa7e9beea, ftLastAccessTime.dwHighDateTime=0x1d2d452, ftLastWriteTime.dwLowDateTime=0xa7e9beea, ftLastWriteTime.dwHighDateTime=0x1d2d452, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0106.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0106.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.204] GetFullPathNameW (in: lpFileName="Google", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Google", lpFilePart=0x0) returned 0x23 [0106.204] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFindFileData=0x119eb00 | out: lpFindFileData=0x119eb00) returned 0x15f7530 [0106.204] FindNextFileW (in: hFindFile=0x15f7530, lpFindFileData=0x119eb10 | out: lpFindFileData=0x119eb10) returned 0 [0106.204] FindClose (in: hFindFile=0x15f7530 | out: hFindFile=0x15f7530) returned 1 [0106.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0106.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0106.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\.", nBufferLength=0x105, lpBuffer=0x119e888, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0106.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\", lpFilePart=0x0) returned 0x2a [0106.204] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\*", lpFindFileData=0x119eb34 | out: lpFindFileData=0x119eb34) returned 0x15f7630 [0106.204] FindNextFileW (in: hFindFile=0x15f7630, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.204] FindNextFileW (in: hFindFile=0x15f7630, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.205] FindNextFileW (in: hFindFile=0x15f7630, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.205] FindNextFileW (in: hFindFile=0x15f7630, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 0 [0106.205] FindClose (in: hFindFile=0x15f7630 | out: hFindFile=0x15f7630) returned 1 [0106.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0106.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0106.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed74) returned 1 [0106.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\google"), fInfoLevelId=0x0, lpFileInformation=0x119edf0 | out: lpFileInformation=0x119edf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98816532, ftCreationTime.dwHighDateTime=0x1d2d452, ftLastAccessTime.dwLowDateTime=0xa7e9beea, ftLastAccessTime.dwHighDateTime=0x1d2d452, ftLastWriteTime.dwLowDateTime=0xa7e9beea, ftLastWriteTime.dwHighDateTime=0x1d2d452, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed70) returned 1 [0106.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed68) returned 1 [0106.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\google"), fInfoLevelId=0x0, lpFileInformation=0x119ede4 | out: lpFileInformation=0x119ede4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98816532, ftCreationTime.dwHighDateTime=0x1d2d452, ftLastAccessTime.dwLowDateTime=0xa7e9beea, ftLastAccessTime.dwHighDateTime=0x1d2d452, ftLastWriteTime.dwLowDateTime=0xa7e9beea, ftLastWriteTime.dwHighDateTime=0x1d2d452, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0106.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edd8) returned 1 [0106.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x119e8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local", lpFilePart=0x0) returned 0x22 [0106.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.205] GetFullPathNameW (in: lpFileName="Google", nBufferLength=0x105, lpBuffer=0x119e87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Google", lpFilePart=0x0) returned 0x23 [0106.205] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFindFileData=0x119eb00 | out: lpFindFileData=0x119eb00) returned 0x15f7730 [0106.205] FindNextFileW (in: hFindFile=0x15f7730, lpFindFileData=0x119eb10 | out: lpFindFileData=0x119eb10) returned 0 [0106.205] FindClose (in: hFindFile=0x15f7730 | out: hFindFile=0x15f7730) returned 1 [0106.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0106.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eda4) returned 1 [0106.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\.", nBufferLength=0x105, lpBuffer=0x119e888, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ee0c) returned 1 [0106.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\", lpFilePart=0x0) returned 0x2a [0106.206] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\*", lpFindFileData=0x119eb34 | out: lpFindFileData=0x119eb34) returned 0x15f73f0 [0106.206] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.206] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.206] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 1 [0106.206] FindNextFileW (in: hFindFile=0x15f73f0, lpFindFileData=0x119eb44 | out: lpFindFileData=0x119eb44) returned 0 [0106.206] FindClose (in: hFindFile=0x15f73f0 | out: hFindFile=0x15f73f0) returned 1 [0106.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edcc) returned 1 [0106.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119edd8) returned 1 [0106.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e88c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed34) returned 1 [0106.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\google\\chrome"), fInfoLevelId=0x0, lpFileInformation=0x119edb0 | out: lpFileInformation=0x119edb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e9beea, ftCreationTime.dwHighDateTime=0x1d2d452, ftLastAccessTime.dwLowDateTime=0xa7e9beea, ftLastAccessTime.dwHighDateTime=0x1d2d452, ftLastWriteTime.dwLowDateTime=0xa7e9beea, ftLastWriteTime.dwHighDateTime=0x1d2d452, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed30) returned 1 [0106.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed28) returned 1 [0106.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\google\\chrome"), fInfoLevelId=0x0, lpFileInformation=0x119eda4 | out: lpFileInformation=0x119eda4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e9beea, ftCreationTime.dwHighDateTime=0x1d2d452, ftLastAccessTime.dwLowDateTime=0xa7e9beea, ftLastAccessTime.dwHighDateTime=0x1d2d452, ftLastWriteTime.dwLowDateTime=0xa7e9beea, ftLastWriteTime.dwHighDateTime=0x1d2d452, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed24) returned 1 [0106.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed98) returned 1 [0106.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e83c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.207] GetFullPathNameW (in: lpFileName="Chrome", nBufferLength=0x105, lpBuffer=0x119e83c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Chrome", lpFilePart=0x0) returned 0x23 [0106.207] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFindFileData=0x119eac0 | out: lpFindFileData=0x119eac0) returned 0x15f70f0 [0106.207] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119ead0 | out: lpFindFileData=0x119ead0) returned 0 [0106.207] FindClose (in: hFindFile=0x15f70f0 | out: hFindFile=0x15f70f0) returned 1 [0106.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed58) returned 1 [0106.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0106.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\.", nBufferLength=0x105, lpBuffer=0x119e848, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edcc) returned 1 [0106.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\", lpFilePart=0x0) returned 0x31 [0106.207] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x119eaf4 | out: lpFindFileData=0x119eaf4) returned 0x15f76f0 [0106.207] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119eb04 | out: lpFindFileData=0x119eb04) returned 1 [0106.207] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119eb04 | out: lpFindFileData=0x119eb04) returned 1 [0106.207] FindNextFileW (in: hFindFile=0x15f76f0, lpFindFileData=0x119eb04 | out: lpFindFileData=0x119eb04) returned 0 [0106.207] FindClose (in: hFindFile=0x15f76f0 | out: hFindFile=0x15f76f0) returned 1 [0106.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed8c) returned 1 [0106.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0106.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e88c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed34) returned 1 [0106.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\google\\chrome"), fInfoLevelId=0x0, lpFileInformation=0x119edb0 | out: lpFileInformation=0x119edb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e9beea, ftCreationTime.dwHighDateTime=0x1d2d452, ftLastAccessTime.dwLowDateTime=0xa7e9beea, ftLastAccessTime.dwHighDateTime=0x1d2d452, ftLastWriteTime.dwLowDateTime=0xa7e9beea, ftLastWriteTime.dwHighDateTime=0x1d2d452, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed30) returned 1 [0106.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed28) returned 1 [0106.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\google\\chrome"), fInfoLevelId=0x0, lpFileInformation=0x119eda4 | out: lpFileInformation=0x119eda4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e9beea, ftCreationTime.dwHighDateTime=0x1d2d452, ftLastAccessTime.dwLowDateTime=0xa7e9beea, ftLastAccessTime.dwHighDateTime=0x1d2d452, ftLastWriteTime.dwLowDateTime=0xa7e9beea, ftLastWriteTime.dwHighDateTime=0x1d2d452, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed24) returned 1 [0106.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed98) returned 1 [0106.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e83c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.208] GetFullPathNameW (in: lpFileName="Chrome", nBufferLength=0x105, lpBuffer=0x119e83c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Chrome", lpFilePart=0x0) returned 0x23 [0106.208] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFindFileData=0x119eac0 | out: lpFindFileData=0x119eac0) returned 0x15f72f0 [0106.208] FindNextFileW (in: hFindFile=0x15f72f0, lpFindFileData=0x119ead0 | out: lpFindFileData=0x119ead0) returned 0 [0106.208] FindClose (in: hFindFile=0x15f72f0 | out: hFindFile=0x15f72f0) returned 1 [0106.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed58) returned 1 [0106.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0106.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\.", nBufferLength=0x105, lpBuffer=0x119e848, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edcc) returned 1 [0106.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\", lpFilePart=0x0) returned 0x31 [0106.209] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x119eaf4 | out: lpFindFileData=0x119eaf4) returned 0x15f7570 [0106.209] FindNextFileW (in: hFindFile=0x15f7570, lpFindFileData=0x119eb04 | out: lpFindFileData=0x119eb04) returned 1 [0106.209] FindNextFileW (in: hFindFile=0x15f7570, lpFindFileData=0x119eb04 | out: lpFindFileData=0x119eb04) returned 1 [0106.209] FindNextFileW (in: hFindFile=0x15f7570, lpFindFileData=0x119eb04 | out: lpFindFileData=0x119eb04) returned 0 [0106.209] FindClose (in: hFindFile=0x15f7570 | out: hFindFile=0x15f7570) returned 1 [0106.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed8c) returned 1 [0106.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0106.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e88c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e8b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed34) returned 1 [0106.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\google\\chrome"), fInfoLevelId=0x0, lpFileInformation=0x119edb0 | out: lpFileInformation=0x119edb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e9beea, ftCreationTime.dwHighDateTime=0x1d2d452, ftLastAccessTime.dwLowDateTime=0xa7e9beea, ftLastAccessTime.dwHighDateTime=0x1d2d452, ftLastWriteTime.dwLowDateTime=0xa7e9beea, ftLastWriteTime.dwHighDateTime=0x1d2d452, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed30) returned 1 [0106.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed28) returned 1 [0106.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\google\\chrome"), fInfoLevelId=0x0, lpFileInformation=0x119eda4 | out: lpFileInformation=0x119eda4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e9beea, ftCreationTime.dwHighDateTime=0x1d2d452, ftLastAccessTime.dwLowDateTime=0xa7e9beea, ftLastAccessTime.dwHighDateTime=0x1d2d452, ftLastWriteTime.dwLowDateTime=0xa7e9beea, ftLastWriteTime.dwHighDateTime=0x1d2d452, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed24) returned 1 [0106.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed98) returned 1 [0106.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x119e880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x29 [0106.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e83c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.209] GetFullPathNameW (in: lpFileName="Chrome", nBufferLength=0x105, lpBuffer=0x119e83c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\Chrome", lpFilePart=0x0) returned 0x23 [0106.209] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFindFileData=0x119eac0 | out: lpFindFileData=0x119eac0) returned 0x15f7230 [0106.210] FindNextFileW (in: hFindFile=0x15f7230, lpFindFileData=0x119ead0 | out: lpFindFileData=0x119ead0) returned 0 [0106.210] FindClose (in: hFindFile=0x15f7230 | out: hFindFile=0x15f7230) returned 1 [0106.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed58) returned 1 [0106.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed64) returned 1 [0106.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\.", nBufferLength=0x105, lpBuffer=0x119e848, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119edcc) returned 1 [0106.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e8b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\", lpFilePart=0x0) returned 0x31 [0106.210] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x119eaf4 | out: lpFindFileData=0x119eaf4) returned 0x15f72f0 [0106.210] FindNextFileW (in: hFindFile=0x15f72f0, lpFindFileData=0x119eb04 | out: lpFindFileData=0x119eb04) returned 1 [0106.210] FindNextFileW (in: hFindFile=0x15f72f0, lpFindFileData=0x119eb04 | out: lpFindFileData=0x119eb04) returned 1 [0106.210] FindNextFileW (in: hFindFile=0x15f72f0, lpFindFileData=0x119eb04 | out: lpFindFileData=0x119eb04) returned 0 [0106.210] FindClose (in: hFindFile=0x15f72f0 | out: hFindFile=0x15f72f0) returned 1 [0106.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed8c) returned 1 [0106.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed98) returned 1 [0106.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3a [0106.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x119e878, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3a [0106.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x119e84c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3a [0106.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e878, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x119e874, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3a [0106.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ecf4) returned 1 [0106.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\google\\chrome\\user data"), fInfoLevelId=0x0, lpFileInformation=0x119ed70 | out: lpFileInformation=0x119ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e9beea, ftCreationTime.dwHighDateTime=0x1d2d452, ftLastAccessTime.dwLowDateTime=0xfdd7335d, ftLastAccessTime.dwHighDateTime=0x1d2d5a0, ftLastWriteTime.dwLowDateTime=0xfdd7335d, ftLastWriteTime.dwHighDateTime=0x1d2d5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ecf0) returned 1 [0106.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x119e874, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3a [0106.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ece8) returned 1 [0106.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data" (normalized: "c:\\users\\5jghkoaofdp\\appdata\\local\\google\\chrome\\user data"), fInfoLevelId=0x0, lpFileInformation=0x119ed64 | out: lpFileInformation=0x119ed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e9beea, ftCreationTime.dwHighDateTime=0x1d2d452, ftLastAccessTime.dwLowDateTime=0xfdd7335d, ftLastAccessTime.dwHighDateTime=0x1d2d5a0, ftLastWriteTime.dwLowDateTime=0xfdd7335d, ftLastWriteTime.dwHighDateTime=0x1d2d5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ece4) returned 1 [0106.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed58) returned 1 [0106.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x119e840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x30 [0106.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x119e7fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3a [0106.211] GetFullPathNameW (in: lpFileName="User Data", nBufferLength=0x105, lpBuffer=0x119e7fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\User Data", lpFilePart=0x0) returned 0x26 [0106.211] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFindFileData=0x119ea80 | out: lpFindFileData=0x119ea80) returned 0x15f7170 [0106.211] FindNextFileW (in: hFindFile=0x15f7170, lpFindFileData=0x119ea90 | out: lpFindFileData=0x119ea90) returned 0 [0106.211] FindClose (in: hFindFile=0x15f7170 | out: hFindFile=0x15f7170) returned 1 [0106.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed18) returned 1 [0106.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed24) returned 1 [0106.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\.", nBufferLength=0x105, lpBuffer=0x119e808, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3a [0106.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed8c) returned 1 [0106.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x119e874, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3a [0106.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x3b [0106.211] FindFirstFileW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x119eab4 | out: lpFindFileData=0x119eab4) returned 0x15f70f0 [0106.212] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119eac4 | out: lpFindFileData=0x119eac4) returned 1 [0106.212] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119eac4 | out: lpFindFileData=0x119eac4) returned 1 [0106.212] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119eac4 | out: lpFindFileData=0x119eac4) returned 1 [0106.212] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119eac4 | out: lpFindFileData=0x119eac4) returned 1 [0106.212] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119eac4 | out: lpFindFileData=0x119eac4) returned 1 [0106.212] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119eac4 | out: lpFindFileData=0x119eac4) returned 1 [0106.212] FindNextFileW (in: hFindFile=0x15f70f0, lpFindFileData=0x119eac4 | out: lpFindFileData=0x119eac4) returned 1 [0106.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed4c) returned 1 [0106.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed58) returned 1 [0106.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ecf4) returned 1 [0106.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ecf0) returned 1 [0106.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ece8) returned 1 [0106.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ece4) returned 1 [0106.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed58) returned 1 [0106.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed18) returned 1 [0106.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed24) returned 1 [0106.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed8c) returned 1 [0106.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed4c) returned 1 [0106.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed58) returned 1 [0106.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3a [0106.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ecf4) returned 1 [0106.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ecf0) returned 1 [0106.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ece8) returned 1 [0106.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ece4) returned 1 [0106.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed58) returned 1 [0106.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed18) returned 1 [0106.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed24) returned 1 [0106.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed8c) returned 1 [0106.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed4c) returned 1 [0106.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed58) returned 1 [0106.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3a [0106.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ecf4) returned 1 [0106.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ecf0) returned 1 [0106.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ece8) returned 1 [0106.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ece4) returned 1 [0106.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed58) returned 1 [0106.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed18) returned 1 [0106.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed24) returned 1 [0106.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed8c) returned 1 [0106.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed4c) returned 1 [0106.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed58) returned 1 [0106.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3a [0106.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ecf4) returned 1 [0106.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ecf0) returned 1 [0106.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ece8) returned 1 [0106.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ece4) returned 1 [0106.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed58) returned 1 [0106.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed18) returned 1 [0106.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed24) returned 1 [0106.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed8c) returned 1 [0106.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed4c) returned 1 [0106.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed58) returned 1 [0106.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3a [0106.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ecf4) returned 1 [0106.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ecf0) returned 1 [0106.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ece8) returned 1 [0106.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ece4) returned 1 [0106.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed58) returned 1 [0106.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed18) returned 1 [0106.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed24) returned 1 [0106.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed8c) returned 1 [0106.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed4c) returned 1 [0106.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed58) returned 1 [0106.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3a [0106.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ecf4) returned 1 [0106.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ecf0) returned 1 [0106.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ece8) returned 1 [0106.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ece4) returned 1 [0106.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed58) returned 1 [0106.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed18) returned 1 [0106.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed24) returned 1 [0106.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed8c) returned 1 [0106.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed4c) returned 1 [0106.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed58) returned 1 [0106.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x119e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3a [0106.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ecf4) returned 1 [0106.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ecf0) returned 1 [0106.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ece8) returned 1 [0106.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ece4) returned 1 [0106.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed58) returned 1 [0106.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed18) returned 1 [0106.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed24) returned 1 [0106.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed8c) returned 1 [0106.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed4c) returned 1 [0106.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed58) returned 1 [0106.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ecf4) returned 1 [0106.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ecf0) returned 1 [0106.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ece8) returned 1 [0106.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ece4) returned 1 [0106.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed58) returned 1 [0106.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed18) returned 1 [0106.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed24) returned 1 [0106.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed8c) returned 1 [0106.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed4c) returned 1 [0106.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed58) returned 1 [0106.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ecb4) returned 1 [0106.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ecb0) returned 1 [0106.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119eca8) returned 1 [0106.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119eca4) returned 1 [0106.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed18) returned 1 [0106.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ecd8) returned 1 [0106.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ece4) returned 1 [0106.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x119ed4c) returned 1 [0106.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x119ed0c) returned 1 [0106.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x43 [0106.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x43 [0106.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x119e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x42 [0106.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x48 [0106.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases", lpFilePart=0x0) returned 0x4c [0106.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases", nBufferLength=0x105, lpBuffer=0x119e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases", lpFilePart=0x0) returned 0x4c [0107.185] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x119e89c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5JgHKoaOfdp\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5a [0114.324] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0114.325] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x46, wParam=0x0, lParam=0x119f10c) returned 0x0 [0114.325] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x83, wParam=0x1, lParam=0x119f0e4) returned 0x0 [0114.326] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x85, wParam=0x7040931, lParam=0x0) returned 0x0 [0114.326] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0114.326] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0114.326] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0114.326] GetWindowPlacement (in: hWnd=0x30258, lpwndpl=0x119eebc | out: lpwndpl=0x119eebc) returned 1 [0114.326] GetClientRect (in: hWnd=0x30258, lpRect=0x119ee68 | out: lpRect=0x119ee68) returned 1 [0114.326] GetWindowTextLengthW (hWnd=0x30258) returned 15 [0114.326] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0114.326] GetSystemMetrics (nIndex=42) returned 0 [0114.326] GetWindowTextW (in: hWnd=0x30258, lpString=0x119ed20, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0114.326] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xd, wParam=0x10, lParam=0x119ed20) returned 0xf [0114.327] GetClientRect (in: hWnd=0x30258, lpRect=0x119ed70 | out: lpRect=0x119ed70) returned 1 [0114.327] GetCurrentObject (hdc=0x470108fd, type=0x1) returned 0x1b00017 [0114.327] GetCurrentObject (hdc=0x470108fd, type=0x2) returned 0x1900010 [0114.327] GetCurrentObject (hdc=0x470108fd, type=0x7) returned 0xf0506d3 [0114.327] GetCurrentObject (hdc=0x470108fd, type=0x6) returned 0x18a0048 [0114.327] SaveDC (hdc=0x470108fd) returned 1 [0114.327] GetNearestColor (hdc=0x470108fd, color=0x0) returned 0x0 [0114.327] CreateSolidBrush (color=0x0) returned 0x4710086a [0114.327] FillRect (hDC=0x470108fd, lprc=0x119ec10, hbr=0x4710086a) returned 1 [0114.327] DeleteObject (ho=0x4710086a) returned 1 [0114.327] RestoreDC (hdc=0x470108fd, nSavedDC=-1) returned 1 [0114.327] GetWindowPlacement (in: hWnd=0x30258, lpwndpl=0x119eea0 | out: lpwndpl=0x119eea0) returned 1 [0114.327] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x47, wParam=0x0, lParam=0x119f10c) returned 0x0 [0114.327] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x3, wParam=0x0, lParam=0x82022e) returned 0x0 [0114.327] GetClientRect (in: hWnd=0x30258, lpRect=0x119e888 | out: lpRect=0x119e888) returned 1 [0114.327] GetWindowRect (in: hWnd=0x30258, lpRect=0x119e888 | out: lpRect=0x119e888) returned 1 [0114.327] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x5, wParam=0x0, lParam=0x1c302ec) returned 0x0 [0114.327] GetClientRect (in: hWnd=0x30258, lpRect=0x119ee50 | out: lpRect=0x119ee50) returned 1 [0114.327] GetWindowRect (in: hWnd=0x30258, lpRect=0x119ee50 | out: lpRect=0x119ee50) returned 1 [0114.327] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0114.327] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0114.327] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0114.328] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0114.328] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0114.328] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0114.329] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0114.357] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x46, wParam=0x0, lParam=0x119f10c) returned 0x0 [0114.358] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.358] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0114.358] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0114.358] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0114.358] GetWindowPlacement (in: hWnd=0x30258, lpwndpl=0x119eebc | out: lpwndpl=0x119eebc) returned 1 [0114.358] GetClientRect (in: hWnd=0x30258, lpRect=0x119ee68 | out: lpRect=0x119ee68) returned 1 [0114.358] GetWindowTextLengthW (hWnd=0x30258) returned 15 [0114.358] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0114.358] GetSystemMetrics (nIndex=42) returned 0 [0114.358] GetWindowTextW (in: hWnd=0x30258, lpString=0x119ed20, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0114.358] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xd, wParam=0x10, lParam=0x119ed20) returned 0xf [0114.359] GetClientRect (in: hWnd=0x30258, lpRect=0x119ed70 | out: lpRect=0x119ed70) returned 1 [0114.359] GetCurrentObject (hdc=0x50108bd, type=0x1) returned 0x1b00017 [0114.359] GetCurrentObject (hdc=0x50108bd, type=0x2) returned 0x1900010 [0114.359] GetCurrentObject (hdc=0x50108bd, type=0x7) returned 0xf0506d3 [0114.359] GetCurrentObject (hdc=0x50108bd, type=0x6) returned 0x18a0048 [0114.359] SaveDC (hdc=0x50108bd) returned 1 [0114.359] GetNearestColor (hdc=0x50108bd, color=0x0) returned 0x0 [0114.359] CreateSolidBrush (color=0x0) returned 0x4810086a [0114.359] FillRect (hDC=0x50108bd, lprc=0x119ec10, hbr=0x4810086a) returned 1 [0114.359] DeleteObject (ho=0x4810086a) returned 1 [0114.359] RestoreDC (hdc=0x50108bd, nSavedDC=-1) returned 1 [0114.359] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.359] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.359] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.360] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x14, wParam=0x50108bd, lParam=0x0) returned 0x1 [0114.360] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.360] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.360] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102bc, Msg=0x14, wParam=0xe010919, lParam=0x0) returned 0x1 [0114.360] GetStockObject (i=5) returned 0x1900015 [0114.360] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.360] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.360] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.361] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.361] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x14, wParam=0x50108bd, lParam=0x0) returned 0x1 [0114.361] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.361] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.361] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.361] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0x14, wParam=0x50108bd, lParam=0x0) returned 0x1 [0114.361] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.361] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.362] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.362] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0x14, wParam=0x50108bd, lParam=0x0) returned 0x1 [0114.362] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.362] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x14, wParam=0x470108fd, lParam=0x0) returned 0x1 [0114.362] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0114.362] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x14, wParam=0xe010919, lParam=0x0) returned 0x1 [0114.362] GetStockObject (i=5) returned 0x1900015 [0114.362] GetWindowPlacement (in: hWnd=0x30258, lpwndpl=0x119eea0 | out: lpwndpl=0x119eea0) returned 1 [0114.362] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x47, wParam=0x0, lParam=0x119f10c) returned 0x0 [0114.362] GetClientRect (in: hWnd=0x30258, lpRect=0x119ee50 | out: lpRect=0x119ee50) returned 1 [0114.362] GetWindowRect (in: hWnd=0x30258, lpRect=0x119ee50 | out: lpRect=0x119ee50) returned 1 [0114.362] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0114.362] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0114.362] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0114.363] IsWindowUnicode (hWnd=0x30258) returned 1 [0114.363] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0114.363] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x88, wParam=0x4, lParam=0x0) returned 0x0 [0114.363] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2010002) returned 0x0 [0114.363] TranslateMessage (lpMsg=0x119f22c) returned 0 [0114.363] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0114.363] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa1, wParam=0x2, lParam=0x790314) returned 0x0 [0114.364] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x112, wParam=0xf012, lParam=0x790314) returned 0x0 [0114.848] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0114.848] GetCapture () returned 0x0 [0114.850] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x231, wParam=0x0, lParam=0x0) returned 0x0 [0114.851] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x216, wParam=0x9, lParam=0x119e500) returned 0x0 [0114.851] BeginPaint (in: hWnd=0x30258, lpPaint=0x119e0fc | out: lpPaint=0x119e0fc) returned 0x470108fd [0114.851] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.851] GetWindowTextLengthW (hWnd=0x30258) returned 15 [0114.851] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0114.851] GetSystemMetrics (nIndex=42) returned 0 [0114.852] GetWindowTextW (in: hWnd=0x30258, lpString=0x119e084, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0114.852] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xd, wParam=0x10, lParam=0x119e084) returned 0xf [0114.852] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.852] EndPaint (hWnd=0x30258, lpPaint=0x119e0f8) returned 1 [0114.852] BeginPaint (in: hWnd=0x202a8, lpPaint=0x119e110 | out: lpPaint=0x119e110) returned 0x50108bd [0114.852] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.852] GetWindowTextLengthW (hWnd=0x202a8) returned 7 [0114.852] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0114.852] GetSystemMetrics (nIndex=42) returned 0 [0114.852] GetWindowTextW (in: hWnd=0x202a8, lpString=0x119e0b4, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0114.852] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xd, wParam=0x8, lParam=0x119e0b4) returned 0x7 [0114.852] GetClientRect (in: hWnd=0x202a8, lpRect=0x119e170 | out: lpRect=0x119e170) returned 1 [0114.852] GetCurrentObject (hdc=0x50108bd, type=0x1) returned 0x1b00017 [0114.852] GetCurrentObject (hdc=0x50108bd, type=0x2) returned 0x1900010 [0114.852] GetCurrentObject (hdc=0x50108bd, type=0x7) returned 0xf0506d3 [0114.852] GetCurrentObject (hdc=0x50108bd, type=0x6) returned 0x18a0048 [0114.852] SaveDC (hdc=0x50108bd) returned 1 [0114.852] GetNearestColor (hdc=0x50108bd, color=0x0) returned 0x0 [0114.852] CreateSolidBrush (color=0x0) returned 0x4910086a [0114.852] FillRect (hDC=0x50108bd, lprc=0x119e010, hbr=0x4910086a) returned 1 [0114.852] DeleteObject (ho=0x4910086a) returned 1 [0114.852] RestoreDC (hdc=0x50108bd, nSavedDC=-1) returned 1 [0114.852] GetWindowTextLengthW (hWnd=0x202a8) returned 7 [0114.852] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0114.852] GetSystemMetrics (nIndex=42) returned 0 [0114.852] GetWindowTextW (in: hWnd=0x202a8, lpString=0x119e0b4, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0114.852] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xd, wParam=0x8, lParam=0x119e0b4) returned 0x7 [0114.853] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119e070, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8byt â\x19\x01(\x18\x0b\x03\x18", lpUsedDefaultChar=0x0) returned 17 [0114.853] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0114.853] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=1) returned 0x4b08085a [0114.853] GdipCreateFromHDC (hdc=0x50108bd, graphics=0x119df94) returned 0x0 [0114.853] GdipSetPageUnit (graphics=0x56086d8, unit=0x2) returned 0x0 [0114.853] GdipCreateMatrix (matrix=0x119df54) returned 0x0 [0114.853] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608cb8) returned 0x0 [0114.853] GdipIsMatrixIdentity (matrix=0x5608cb8, result=0x119df6c) returned 0x0 [0114.853] GdipDeleteMatrix (matrix=0x5608cb8) returned 0x0 [0114.853] GdipCreateRegion (region=0x119df54) returned 0x0 [0114.853] GdipGetClip (graphics=0x56086d8, region=0x56089b8) returned 0x0 [0114.853] GdipIsInfiniteRegion (region=0x56089b8, graphics=0x56086d8, result=0x119df60) returned 0x0 [0114.853] GdipDeleteRegion (region=0x56089b8) returned 0x0 [0114.853] GdipSaveGraphics (graphics=0x56086d8, state=0x119df8c) returned 0x0 [0114.853] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119df70) returned 0x0 [0114.853] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119df70) returned 0x0 [0114.853] GdipCreateRegion (region=0x119df10) returned 0x0 [0114.853] GdipGetClip (graphics=0x56086d8, region=0x5608b78) returned 0x0 [0114.853] GdipCreateMatrix (matrix=0x119df10) returned 0x0 [0114.853] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5603670) returned 0x0 [0114.853] GdipIsMatrixIdentity (matrix=0x5603670, result=0x119df28) returned 0x0 [0114.853] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626dc8 [0114.853] GdipGetMatrixElements (matrix=0x5603670, matrixOut=0x1626dc8) returned 0x0 [0114.853] LocalFree (hMem=0x1626dc8) returned 0x0 [0114.853] GdipDeleteMatrix (matrix=0x5603670) returned 0x0 [0114.853] GdipIsInfiniteRegion (region=0x5608b78, graphics=0x56086d8, result=0x119df54) returned 0x0 [0114.853] GdipDeleteRegion (region=0x5608b78) returned 0x0 [0114.853] GdipGetDC (graphics=0x56086d8, hdc=0x119df5c) returned 0x0 [0114.854] GetCurrentObject (hdc=0x50108bd, type=0x1) returned 0x1b00017 [0114.854] GetCurrentObject (hdc=0x50108bd, type=0x2) returned 0x1900010 [0114.854] GetCurrentObject (hdc=0x50108bd, type=0x7) returned 0xf0506d3 [0114.854] GetCurrentObject (hdc=0x50108bd, type=0x6) returned 0x18a0048 [0114.854] SaveDC (hdc=0x50108bd) returned 1 [0114.854] OffsetViewportOrgEx (in: hdc=0x50108bd, x=0, y=0, lppt=0x30b1d7c | out: lppt=0x30b1d7c) returned 1 [0114.854] GetCurrentObject (hdc=0x50108bd, type=0x6) returned 0x18a0048 [0114.854] GetObjectW (in: h=0x18a0048, c=92, pv=0x119de3c | out: pv=0x119de3c) returned 92 [0114.854] SelectObject (hdc=0x50108bd, h=0xb20a08b8) returned 0x18a0048 [0114.854] DrawTextExW (in: hdc=0x50108bd, lpchText="Decrypt", cchText=7, lprc=0x119df78, format=0x102410, lpdtp=0x30b1d8c | out: lpchText="Decrypt", lprc=0x119df78) returned 13 [0114.854] GetTextAlign (hdc=0x50108bd) returned 0x0 [0114.854] GetTextColor (hdc=0x50108bd) returned 0x0 [0114.854] SetTextColor (hdc=0x50108bd, color=0xf0f0f0) returned 0x0 [0114.854] GetCurrentObject (hdc=0x50108bd, type=0x6) returned 0xb20a08b8 [0114.854] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119dce8 | out: pv=0x119dce8) returned 92 [0114.854] GetBkMode (hdc=0x50108bd) returned 2 [0114.854] SetBkMode (hdc=0x50108bd, mode=1) returned 2 [0114.854] DrawTextExW (in: hdc=0x50108bd, lpchText="Decrypt", cchText=7, lprc=0x119df1c, format=0x102010, lpdtp=0x30b1f54 | out: lpchText="Decrypt", lprc=0x119df1c) returned 13 [0114.854] RestoreDC (hdc=0x50108bd, nSavedDC=-1) returned 1 [0114.855] GdipReleaseDC (graphics=0x56086d8, hdc=0x50108bd) returned 0x0 [0114.855] GdipDrawLineI (graphics=0x56086d8, pen=0x5603418, x1=1, y1=6, x2=1, y2=59) returned 0x0 [0114.855] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=0, y1=6, x2=0, y2=58) returned 0x0 [0114.855] GdipDrawLineI (graphics=0x56086d8, pen=0x5603418, x1=0, y1=59, x2=711, y2=59) returned 0x0 [0114.856] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=0, y1=58, x2=710, y2=58) returned 0x0 [0114.856] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0114.856] GdipDrawLineI (graphics=0x56086d8, pen=0x5603418, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0114.856] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=52, y1=5, x2=709, y2=5) returned 0x0 [0114.856] GdipDrawLineI (graphics=0x56086d8, pen=0x5603418, x1=52, y1=6, x2=710, y2=6) returned 0x0 [0114.857] GdipDrawLineI (graphics=0x56086d8, pen=0x5603418, x1=710, y1=5, x2=710, y2=59) returned 0x0 [0114.857] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=709, y1=6, x2=709, y2=58) returned 0x0 [0114.857] GdipDeletePen (pen=0x5603418) returned 0x0 [0114.857] GdipDeletePen (pen=0x56089b8) returned 0x0 [0114.857] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0114.857] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=0) returned 0x4b08085a [0114.857] SelectPalette (hdc=0x50108bd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.857] EndPaint (hWnd=0x202a8, lpPaint=0x119e10c) returned 1 [0114.857] BeginPaint (in: hWnd=0x102b6, lpPaint=0x119e0e0 | out: lpPaint=0x119e0e0) returned 0xe010919 [0114.857] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.857] CreateCompatibleDC (hdc=0xe010919) returned 0x2c010903 [0114.857] SelectObject (hdc=0x2c010903, h=0x610508cf) returned 0x185000f [0114.857] GdipCreateFromHDC (hdc=0x2c010903, graphics=0x119e0d8) returned 0x0 [0114.857] GdipTranslateWorldTransform (graphics=0x56086d8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0114.857] GdipSetClipRectI (graphics=0x56086d8, x=0, y=0, width=73, height=13, combineMode=0x0) returned 0x0 [0114.857] GdipCreateMatrix (matrix=0x119e140) returned 0x0 [0114.857] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608b78) returned 0x0 [0114.857] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119e158) returned 0x0 [0114.858] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626a48 [0114.858] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x1626a48) returned 0x0 [0114.858] LocalFree (hMem=0x1626a48) returned 0x0 [0114.858] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0114.858] GdipCreateRegion (region=0x119e140) returned 0x0 [0114.858] GdipGetClip (graphics=0x56086d8, region=0x5603418) returned 0x0 [0114.858] GdipIsInfiniteRegion (region=0x5603418, graphics=0x56086d8, result=0x119e14c) returned 0x0 [0114.858] GdipSaveGraphics (graphics=0x56086d8, state=0x119e178) returned 0x0 [0114.858] GetWindowTextLengthW (hWnd=0x102b6) returned 14 [0114.858] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0114.858] GetSystemMetrics (nIndex=42) returned 0 [0114.858] GetWindowTextW (in: hWnd=0x102b6, lpString=0x119e074, nMaxCount=15 | out: lpString="Enter the key:") returned 14 [0114.858] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0xd, wParam=0xf, lParam=0x119e074) returned 0xe [0114.858] GetClientRect (in: hWnd=0x102b6, lpRect=0x119e140 | out: lpRect=0x119e140) returned 1 [0114.858] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119df6c, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8bytpâ\x19\x01Ø\x1f\x0b\x03\x18", lpUsedDefaultChar=0x0) returned 17 [0114.859] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0114.859] GdipCreateRegion (region=0x119df7c) returned 0x0 [0114.859] GdipGetClip (graphics=0x56086d8, region=0x56034a8) returned 0x0 [0114.859] GdipCreateMatrix (matrix=0x119df7c) returned 0x0 [0114.859] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5603670) returned 0x0 [0114.859] GdipIsMatrixIdentity (matrix=0x5603670, result=0x119df94) returned 0x0 [0114.859] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626a80 [0114.859] GdipGetMatrixElements (matrix=0x5603670, matrixOut=0x1626a80) returned 0x0 [0114.859] LocalFree (hMem=0x1626a80) returned 0x0 [0114.859] GdipCombineRegionRegion (region=0x56034a8, region2=0x5603418, combineMode=0x1) returned 0x0 [0114.859] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626b28 [0114.859] GdipGetMatrixElements (matrix=0x5603670, matrixOut=0x1626b28) returned 0x0 [0114.859] LocalFree (hMem=0x1626b28) returned 0x0 [0114.859] GdipDeleteMatrix (matrix=0x5603670) returned 0x0 [0114.859] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x56086d8, result=0x119dfc0) returned 0x0 [0114.859] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x56086d8, result=0x119dfb0) returned 0x0 [0114.859] GdipGetRegionHRgn (region=0x56034a8, graphics=0x56086d8, hRgn=0x119dfb0) returned 0x0 [0114.859] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0114.859] GdipGetDC (graphics=0x56086d8, hdc=0x119dfc8) returned 0x0 [0114.859] GetCurrentObject (hdc=0x2c010903, type=0x1) returned 0x1b00017 [0114.859] GetCurrentObject (hdc=0x2c010903, type=0x2) returned 0x1900010 [0114.859] GetCurrentObject (hdc=0x2c010903, type=0x7) returned 0x610508cf [0114.859] GetCurrentObject (hdc=0x2c010903, type=0x6) returned 0x18a0048 [0114.859] SaveDC (hdc=0x2c010903) returned 1 [0114.859] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7c040894 [0114.859] GetClipRgn (hdc=0x2c010903, hrgn=0x7c040894) returned 0 [0114.859] SelectClipRgn (hdc=0x2c010903, hrgn=0x710408c1) returned 2 [0114.859] DeleteObject (ho=0x7c040894) returned 1 [0114.859] DeleteObject (ho=0x710408c1) returned 1 [0114.859] OffsetViewportOrgEx (in: hdc=0x2c010903, x=0, y=0, lppt=0x30b2304 | out: lppt=0x30b2304) returned 1 [0114.859] OffsetViewportOrgEx (in: hdc=0x2c010903, x=-6, y=-14, lppt=0x30b2314 | out: lppt=0x30b2314) returned 1 [0114.859] GetClientRect (in: hWnd=0x202a8, lpRect=0x119dff4 | out: lpRect=0x119dff4) returned 1 [0114.859] GetCurrentObject (hdc=0x2c010903, type=0x1) returned 0x1b00017 [0114.859] GetCurrentObject (hdc=0x2c010903, type=0x2) returned 0x1900010 [0114.859] GetCurrentObject (hdc=0x2c010903, type=0x7) returned 0x610508cf [0114.859] GetCurrentObject (hdc=0x2c010903, type=0x6) returned 0x18a0048 [0114.860] SaveDC (hdc=0x2c010903) returned 2 [0114.860] GetNearestColor (hdc=0x2c010903, color=0x0) returned 0x0 [0114.860] CreateSolidBrush (color=0x0) returned 0x4a10086a [0114.860] FillRect (hDC=0x2c010903, lprc=0x119de94, hbr=0x4a10086a) returned 1 [0114.860] DeleteObject (ho=0x4a10086a) returned 1 [0114.860] RestoreDC (hdc=0x2c010903, nSavedDC=-1) returned 1 [0114.860] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119def4, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8bytpâ\x19\x01 #\x0b\x03\x18", lpUsedDefaultChar=0x0) returned 17 [0114.860] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0114.860] SelectPalette (hdc=0x2c010903, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.860] GdipCreateFromHDC (hdc=0x2c010903, graphics=0x119de18) returned 0x0 [0114.860] GdipSetPageUnit (graphics=0x5618fa8, unit=0x2) returned 0x0 [0114.860] GdipCreateMatrix (matrix=0x119ddd8) returned 0x0 [0114.860] GdipGetWorldTransform (graphics=0x5618fa8, matrix=0x5608be8) returned 0x0 [0114.860] GdipIsMatrixIdentity (matrix=0x5608be8, result=0x119ddf0) returned 0x0 [0114.860] GdipDeleteMatrix (matrix=0x5608be8) returned 0x0 [0114.860] GdipCreateRegion (region=0x119ddd8) returned 0x0 [0114.860] GdipGetClip (graphics=0x5618fa8, region=0x56034a8) returned 0x0 [0114.860] GdipIsInfiniteRegion (region=0x56034a8, graphics=0x5618fa8, result=0x119dde4) returned 0x0 [0114.860] GdipDeleteRegion (region=0x56034a8) returned 0x0 [0114.860] GdipSaveGraphics (graphics=0x5618fa8, state=0x119de10) returned 0x0 [0114.860] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119ddf4) returned 0x0 [0114.860] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119ddf4) returned 0x0 [0114.860] GdipCreateRegion (region=0x119dd94) returned 0x0 [0114.860] GdipGetClip (graphics=0x5618fa8, region=0x5608ad8) returned 0x0 [0114.860] GdipCreateMatrix (matrix=0x119dd94) returned 0x0 [0114.860] GdipGetWorldTransform (graphics=0x5618fa8, matrix=0x5603670) returned 0x0 [0114.860] GdipIsMatrixIdentity (matrix=0x5603670, result=0x119ddac) returned 0x0 [0114.861] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626d20 [0114.861] GdipGetMatrixElements (matrix=0x5603670, matrixOut=0x1626d20) returned 0x0 [0114.861] LocalFree (hMem=0x1626d20) returned 0x0 [0114.861] GdipDeleteMatrix (matrix=0x5603670) returned 0x0 [0114.861] GdipIsInfiniteRegion (region=0x5608ad8, graphics=0x5618fa8, result=0x119ddd8) returned 0x0 [0114.861] GdipDeleteRegion (region=0x5608ad8) returned 0x0 [0114.861] GdipGetDC (graphics=0x5618fa8, hdc=0x119dde0) returned 0x0 [0114.861] GetCurrentObject (hdc=0x2c010903, type=0x1) returned 0x1b00017 [0114.861] GetCurrentObject (hdc=0x2c010903, type=0x2) returned 0x1900010 [0114.861] GetCurrentObject (hdc=0x2c010903, type=0x7) returned 0x610508cf [0114.861] GetCurrentObject (hdc=0x2c010903, type=0x6) returned 0x18a0048 [0114.861] SaveDC (hdc=0x2c010903) returned 2 [0114.861] OffsetViewportOrgEx (in: hdc=0x2c010903, x=0, y=0, lppt=0x30b2720 | out: lppt=0x30b2720) returned 1 [0114.861] GetWindowTextLengthW (hWnd=0x202a8) returned 7 [0114.861] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0114.861] GetSystemMetrics (nIndex=42) returned 0 [0114.861] GetWindowTextW (in: hWnd=0x202a8, lpString=0x119dd60, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0114.861] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xd, wParam=0x8, lParam=0x119dd60) returned 0x7 [0114.861] GetCurrentObject (hdc=0x2c010903, type=0x6) returned 0x18a0048 [0114.861] GetObjectW (in: h=0x18a0048, c=92, pv=0x119dcc0 | out: pv=0x119dcc0) returned 92 [0114.861] SelectObject (hdc=0x2c010903, h=0xb20a08b8) returned 0x18a0048 [0114.861] DrawTextExW (in: hdc=0x2c010903, lpchText="Decrypt", cchText=7, lprc=0x119ddfc, format=0x102410, lpdtp=0x30b27ac | out: lpchText="Decrypt", lprc=0x119ddfc) returned 13 [0114.861] GetWindowTextLengthW (hWnd=0x202a8) returned 7 [0114.861] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0114.861] GetSystemMetrics (nIndex=42) returned 0 [0114.861] GetWindowTextW (in: hWnd=0x202a8, lpString=0x119dd60, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0114.861] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xd, wParam=0x8, lParam=0x119dd60) returned 0x7 [0114.861] GetTextAlign (hdc=0x2c010903) returned 0x0 [0114.861] GetTextColor (hdc=0x2c010903) returned 0x0 [0114.861] SetTextColor (hdc=0x2c010903, color=0xf0f0f0) returned 0x0 [0114.861] GetCurrentObject (hdc=0x2c010903, type=0x6) returned 0xb20a08b8 [0114.861] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119db6c | out: pv=0x119db6c) returned 92 [0114.861] GetBkMode (hdc=0x2c010903) returned 2 [0114.861] SetBkMode (hdc=0x2c010903, mode=1) returned 2 [0114.862] DrawTextExW (in: hdc=0x2c010903, lpchText="Decrypt", cchText=7, lprc=0x119dda0, format=0x102010, lpdtp=0x30b29f0 | out: lpchText="Decrypt", lprc=0x119dda0) returned 13 [0114.862] RestoreDC (hdc=0x2c010903, nSavedDC=-1) returned 1 [0114.862] GdipReleaseDC (graphics=0x5618fa8, hdc=0x2c010903) returned 0x0 [0114.862] GdipDrawLineI (graphics=0x5618fa8, pen=0x56089b8, x1=1, y1=6, x2=1, y2=59) returned 0x0 [0114.862] GdipDrawLineI (graphics=0x5618fa8, pen=0x5608a48, x1=0, y1=6, x2=0, y2=58) returned 0x0 [0114.862] GdipDrawLineI (graphics=0x5618fa8, pen=0x56089b8, x1=0, y1=59, x2=711, y2=59) returned 0x0 [0114.862] GdipDrawLineI (graphics=0x5618fa8, pen=0x5608a48, x1=0, y1=58, x2=710, y2=58) returned 0x0 [0114.862] GdipDrawLineI (graphics=0x5618fa8, pen=0x5608a48, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0114.862] GdipDrawLineI (graphics=0x5618fa8, pen=0x56089b8, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0114.862] GdipDrawLineI (graphics=0x5618fa8, pen=0x5608a48, x1=52, y1=5, x2=709, y2=5) returned 0x0 [0114.862] GdipDrawLineI (graphics=0x5618fa8, pen=0x56089b8, x1=52, y1=6, x2=710, y2=6) returned 0x0 [0114.862] GdipDrawLineI (graphics=0x5618fa8, pen=0x56089b8, x1=710, y1=5, x2=710, y2=59) returned 0x0 [0114.862] GdipDrawLineI (graphics=0x5618fa8, pen=0x5608a48, x1=709, y1=6, x2=709, y2=58) returned 0x0 [0114.862] GdipDeletePen (pen=0x56089b8) returned 0x0 [0114.862] GdipDeletePen (pen=0x5608a48) returned 0x0 [0114.862] GdipDeleteGraphics (graphics=0x5618fa8) returned 0x0 [0114.862] SelectPalette (hdc=0x2c010903, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.862] RestoreDC (hdc=0x2c010903, nSavedDC=-1) returned 1 [0114.862] GdipReleaseDC (graphics=0x56086d8, hdc=0x2c010903) returned 0x0 [0114.862] GdipRestoreGraphics (graphics=0x56086d8, state=0xfd7a0dbd) returned 0x0 [0114.862] GdipDeleteRegion (region=0x5603418) returned 0x0 [0114.862] GetWindowTextLengthW (hWnd=0x102b6) returned 14 [0114.862] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0114.862] GetSystemMetrics (nIndex=42) returned 0 [0114.862] GetWindowTextW (in: hWnd=0x102b6, lpString=0x119e074, nMaxCount=15 | out: lpString="Enter the key:") returned 14 [0114.862] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0xd, wParam=0xf, lParam=0x119e074) returned 0xe [0114.862] GdipGetDC (graphics=0x56086d8, hdc=0x119dffc) returned 0x0 [0114.862] GetCurrentObject (hdc=0x2c010903, type=0x1) returned 0x1b00017 [0114.862] GetCurrentObject (hdc=0x2c010903, type=0x2) returned 0x1900010 [0114.862] GetCurrentObject (hdc=0x2c010903, type=0x7) returned 0x610508cf [0114.862] GetCurrentObject (hdc=0x2c010903, type=0x6) returned 0x18a0048 [0114.862] SaveDC (hdc=0x2c010903) returned 1 [0114.862] GetNearestColor (hdc=0x2c010903, color=0xff) returned 0xff [0114.862] RestoreDC (hdc=0x2c010903, nSavedDC=-1) returned 1 [0114.862] GdipReleaseDC (graphics=0x56086d8, hdc=0x2c010903) returned 0x0 [0114.863] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.863] AdjustWindowRectEx (in: lpRect=0x119df20, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119df20) returned 1 [0114.863] GdipGetTextRenderingHint (graphics=0x56086d8, mode=0x119df9c) returned 0x0 [0114.863] GdipGetDC (graphics=0x56086d8, hdc=0x119df88) returned 0x0 [0114.863] GetCurrentObject (hdc=0x2c010903, type=0x1) returned 0x1b00017 [0114.863] GetCurrentObject (hdc=0x2c010903, type=0x2) returned 0x1900010 [0114.863] GetCurrentObject (hdc=0x2c010903, type=0x7) returned 0x610508cf [0114.863] GetCurrentObject (hdc=0x2c010903, type=0x6) returned 0x18a0048 [0114.863] SaveDC (hdc=0x2c010903) returned 1 [0114.863] GetTextAlign (hdc=0x2c010903) returned 0x0 [0114.863] GetTextColor (hdc=0x2c010903) returned 0x0 [0114.863] SetTextColor (hdc=0x2c010903, color=0xff) returned 0x0 [0114.863] GetCurrentObject (hdc=0x2c010903, type=0x6) returned 0x18a0048 [0114.863] GetObjectW (in: h=0x18a0048, c=92, pv=0x119dce8 | out: pv=0x119dce8) returned 92 [0114.863] SelectObject (hdc=0x2c010903, h=0xb20a08b8) returned 0x18a0048 [0114.863] GetBkMode (hdc=0x2c010903) returned 2 [0114.863] SetBkMode (hdc=0x2c010903, mode=1) returned 2 [0114.863] DrawTextExW (in: hdc=0x2c010903, lpchText="Enter the key:", cchText=14, lprc=0x119df1c, format=0x100000, lpdtp=0x30b2ec4 | out: lpchText="Enter the key:", lprc=0x119df1c) returned 13 [0114.863] RestoreDC (hdc=0x2c010903, nSavedDC=-1) returned 1 [0114.863] GdipReleaseDC (graphics=0x56086d8, hdc=0x2c010903) returned 0x0 [0114.863] GdipGetDC (graphics=0x56086d8, hdc=0x119e138) returned 0x0 [0114.863] BitBlt (hdc=0xe010919, x=0, y=0, cx=73, cy=13, hdcSrc=0x2c010903, x1=0, y1=0, rop=0xcc0020) returned 1 [0114.863] GdipReleaseDC (graphics=0x56086d8, hdc=0x2c010903) returned 0x0 [0114.863] SelectPalette (hdc=0xe010919, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.863] SelectObject (hdc=0x2c010903, h=0x185000f) returned 0x610508cf [0114.863] DeleteDC (hdc=0x2c010903) returned 1 [0114.863] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0114.863] EndPaint (hWnd=0x102b6, lpPaint=0x119e0dc) returned 1 [0114.864] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0114.864] SetTextColor (hdc=0x470108fd, color=0x0) returned 0x0 [0114.864] SetBkColor (hdc=0x470108fd, color=0xffffff) returned 0xffffff [0114.864] SetTextColor (hdc=0x470108fd, color=0x0) returned 0x0 [0114.864] SetBkColor (hdc=0x470108fd, color=0xffffff) returned 0xffffff [0114.864] BeginPaint (in: hWnd=0x102ba, lpPaint=0x119e110 | out: lpPaint=0x119e110) returned 0x50108bd [0114.864] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.864] GetWindowTextLengthW (hWnd=0x102ba) returned 22 [0114.864] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0114.864] GetSystemMetrics (nIndex=42) returned 0 [0114.864] GetWindowTextW (in: hWnd=0x102ba, lpString=0x119e094, nMaxCount=23 | out: lpString="How to buy your file ?") returned 22 [0114.864] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xd, wParam=0x17, lParam=0x119e094) returned 0x16 [0114.864] GetClientRect (in: hWnd=0x102ba, lpRect=0x119e170 | out: lpRect=0x119e170) returned 1 [0114.864] GetCurrentObject (hdc=0x50108bd, type=0x1) returned 0x1b00017 [0114.864] GetCurrentObject (hdc=0x50108bd, type=0x2) returned 0x1900010 [0114.864] GetCurrentObject (hdc=0x50108bd, type=0x7) returned 0xf0506d3 [0114.864] GetCurrentObject (hdc=0x50108bd, type=0x6) returned 0x18a0048 [0114.865] SaveDC (hdc=0x50108bd) returned 1 [0114.865] GetNearestColor (hdc=0x50108bd, color=0x0) returned 0x0 [0114.865] CreateSolidBrush (color=0x0) returned 0x4b10086a [0114.865] FillRect (hDC=0x50108bd, lprc=0x119e010, hbr=0x4b10086a) returned 1 [0114.865] DeleteObject (ho=0x4b10086a) returned 1 [0114.865] RestoreDC (hdc=0x50108bd, nSavedDC=-1) returned 1 [0114.865] GetWindowTextLengthW (hWnd=0x102ba) returned 22 [0114.865] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0114.865] GetSystemMetrics (nIndex=42) returned 0 [0114.865] GetWindowTextW (in: hWnd=0x102ba, lpString=0x119e094, nMaxCount=23 | out: lpString="How to buy your file ?") returned 22 [0114.865] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xd, wParam=0x17, lParam=0x119e094) returned 0x16 [0114.865] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119e070, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8byt â\x19\x01ü.\x0b\x03\x18", lpUsedDefaultChar=0x0) returned 17 [0114.865] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0114.865] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=1) returned 0x4b08085a [0114.865] GdipCreateFromHDC (hdc=0x50108bd, graphics=0x119df94) returned 0x0 [0114.865] GdipSetPageUnit (graphics=0x56086d8, unit=0x2) returned 0x0 [0114.865] GdipCreateMatrix (matrix=0x119df54) returned 0x0 [0114.865] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608cb8) returned 0x0 [0114.865] GdipIsMatrixIdentity (matrix=0x5608cb8, result=0x119df6c) returned 0x0 [0114.865] GdipDeleteMatrix (matrix=0x5608cb8) returned 0x0 [0114.865] GdipCreateRegion (region=0x119df54) returned 0x0 [0114.865] GdipGetClip (graphics=0x56086d8, region=0x56089b8) returned 0x0 [0114.865] GdipIsInfiniteRegion (region=0x56089b8, graphics=0x56086d8, result=0x119df60) returned 0x0 [0114.865] GdipDeleteRegion (region=0x56089b8) returned 0x0 [0114.865] GdipSaveGraphics (graphics=0x56086d8, state=0x119df8c) returned 0x0 [0114.865] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119df70) returned 0x0 [0114.865] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119df70) returned 0x0 [0114.865] GdipCreateRegion (region=0x119df10) returned 0x0 [0114.865] GdipGetClip (graphics=0x56086d8, region=0x56199a8) returned 0x0 [0114.866] GdipCreateMatrix (matrix=0x119df10) returned 0x0 [0114.866] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5619a38) returned 0x0 [0114.866] GdipIsMatrixIdentity (matrix=0x5619a38, result=0x119df28) returned 0x0 [0114.866] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626ee0 [0114.866] GdipGetMatrixElements (matrix=0x5619a38, matrixOut=0x1626ee0) returned 0x0 [0114.866] LocalFree (hMem=0x1626ee0) returned 0x0 [0114.866] GdipDeleteMatrix (matrix=0x5619a38) returned 0x0 [0114.866] GdipIsInfiniteRegion (region=0x56199a8, graphics=0x56086d8, result=0x119df54) returned 0x0 [0114.866] GdipDeleteRegion (region=0x56199a8) returned 0x0 [0114.866] GdipGetDC (graphics=0x56086d8, hdc=0x119df5c) returned 0x0 [0114.866] GetCurrentObject (hdc=0x50108bd, type=0x1) returned 0x1b00017 [0114.866] GetCurrentObject (hdc=0x50108bd, type=0x2) returned 0x1900010 [0114.866] GetCurrentObject (hdc=0x50108bd, type=0x7) returned 0xf0506d3 [0114.866] GetCurrentObject (hdc=0x50108bd, type=0x6) returned 0x18a0048 [0114.866] SaveDC (hdc=0x50108bd) returned 1 [0114.866] OffsetViewportOrgEx (in: hdc=0x50108bd, x=0, y=0, lppt=0x30b3510 | out: lppt=0x30b3510) returned 1 [0114.866] GetCurrentObject (hdc=0x50108bd, type=0x6) returned 0x18a0048 [0114.866] GetObjectW (in: h=0x18a0048, c=92, pv=0x119de3c | out: pv=0x119de3c) returned 92 [0114.866] SelectObject (hdc=0x50108bd, h=0xb20a08b8) returned 0x18a0048 [0114.866] DrawTextExW (in: hdc=0x50108bd, lpchText="How to buy your file ?", cchText=22, lprc=0x119df78, format=0x102410, lpdtp=0x30b3520 | out: lpchText="How to buy your file ?", lprc=0x119df78) returned 13 [0114.866] GetTextAlign (hdc=0x50108bd) returned 0x0 [0114.866] GetTextColor (hdc=0x50108bd) returned 0x0 [0114.866] SetTextColor (hdc=0x50108bd, color=0xf0f0f0) returned 0x0 [0114.866] GetCurrentObject (hdc=0x50108bd, type=0x6) returned 0xb20a08b8 [0114.866] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119dce8 | out: pv=0x119dce8) returned 92 [0114.866] GetBkMode (hdc=0x50108bd) returned 2 [0114.866] SetBkMode (hdc=0x50108bd, mode=1) returned 2 [0114.866] DrawTextExW (in: hdc=0x50108bd, lpchText="How to buy your file ?", cchText=22, lprc=0x119df1c, format=0x102010, lpdtp=0x30b36e8 | out: lpchText="How to buy your file ?", lprc=0x119df1c) returned 13 [0114.866] RestoreDC (hdc=0x50108bd, nSavedDC=-1) returned 1 [0114.866] GdipReleaseDC (graphics=0x56086d8, hdc=0x50108bd) returned 0x0 [0114.866] GdipDrawLineI (graphics=0x56086d8, pen=0x5608a48, x1=1, y1=6, x2=1, y2=93) returned 0x0 [0114.867] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=0, y1=6, x2=0, y2=92) returned 0x0 [0114.867] GdipDrawLineI (graphics=0x56086d8, pen=0x5608a48, x1=0, y1=93, x2=340, y2=93) returned 0x0 [0114.867] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=0, y1=92, x2=339, y2=92) returned 0x0 [0114.867] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0114.867] GdipDrawLineI (graphics=0x56086d8, pen=0x5608a48, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0114.867] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=117, y1=5, x2=338, y2=5) returned 0x0 [0114.868] GdipDrawLineI (graphics=0x56086d8, pen=0x5608a48, x1=117, y1=6, x2=339, y2=6) returned 0x0 [0114.868] GdipDrawLineI (graphics=0x56086d8, pen=0x5608a48, x1=339, y1=5, x2=339, y2=93) returned 0x0 [0114.868] GdipDrawLineI (graphics=0x56086d8, pen=0x56089b8, x1=338, y1=6, x2=338, y2=92) returned 0x0 [0114.868] GdipDeletePen (pen=0x5608a48) returned 0x0 [0114.868] GdipDeletePen (pen=0x56089b8) returned 0x0 [0114.868] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0114.868] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=0) returned 0x4b08085a [0114.868] SelectPalette (hdc=0x50108bd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.868] EndPaint (hWnd=0x102ba, lpPaint=0x119e10c) returned 1 [0114.868] BeginPaint (in: hWnd=0x102bc, lpPaint=0x119e0d4 | out: lpPaint=0x119e0d4) returned 0xe010919 [0114.868] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.868] CreateCompatibleDC (hdc=0xe010919) returned 0x33010903 [0114.868] SelectObject (hdc=0x33010903, h=0x610508cf) returned 0x185000f [0114.868] GdipCreateFromHDC (hdc=0x33010903, graphics=0x119e0cc) returned 0x0 [0114.868] GdipTranslateWorldTransform (graphics=0x56086d8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0114.868] GdipSetClipRectI (graphics=0x56086d8, x=0, y=0, width=26, height=21, combineMode=0x0) returned 0x0 [0114.868] GdipCreateMatrix (matrix=0x119e134) returned 0x0 [0114.868] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x56199a8) returned 0x0 [0114.868] GdipIsMatrixIdentity (matrix=0x56199a8, result=0x119e14c) returned 0x0 [0114.869] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626ee0 [0114.869] GdipGetMatrixElements (matrix=0x56199a8, matrixOut=0x1626ee0) returned 0x0 [0114.869] LocalFree (hMem=0x1626ee0) returned 0x0 [0114.869] GdipDeleteMatrix (matrix=0x56199a8) returned 0x0 [0114.869] GdipCreateRegion (region=0x119e134) returned 0x0 [0114.869] GdipGetClip (graphics=0x56086d8, region=0x56199d8) returned 0x0 [0114.869] GdipIsInfiniteRegion (region=0x56199d8, graphics=0x56086d8, result=0x119e140) returned 0x0 [0114.869] GdipSaveGraphics (graphics=0x56086d8, state=0x119e16c) returned 0x0 [0114.869] GdipRestoreGraphics (graphics=0x56086d8, state=0xfd740dbd) returned 0x0 [0114.869] GdipDeleteRegion (region=0x56199d8) returned 0x0 [0114.869] GdipGetDC (graphics=0x56086d8, hdc=0x119debc) returned 0x0 [0114.869] GetCurrentObject (hdc=0x33010903, type=0x1) returned 0x1b00017 [0114.869] GetCurrentObject (hdc=0x33010903, type=0x2) returned 0x1900010 [0114.869] GetCurrentObject (hdc=0x33010903, type=0x7) returned 0x610508cf [0114.869] GetCurrentObject (hdc=0x33010903, type=0x6) returned 0x18a0048 [0114.869] SaveDC (hdc=0x33010903) returned 1 [0114.869] GetNearestColor (hdc=0x33010903, color=0xc0) returned 0xc0 [0114.869] GetNearestColor (hdc=0x33010903, color=0x40) returned 0x40 [0114.869] GetNearestColor (hdc=0x33010903, color=0x0) returned 0x0 [0114.869] GetNearestColor (hdc=0x33010903, color=0x5656e5) returned 0x5656e5 [0114.869] GetNearestColor (hdc=0x33010903, color=0xf0f0f0) returned 0xf0f0f0 [0114.869] GetNearestColor (hdc=0x33010903, color=0x6060ff) returned 0x6060ff [0114.869] GetNearestColor (hdc=0x33010903, color=0x5656e5) returned 0x5656e5 [0114.869] GetNearestColor (hdc=0x33010903, color=0xe6) returned 0xe6 [0114.869] GetNearestColor (hdc=0x33010903, color=0xf0f0f0) returned 0xf0f0f0 [0114.869] RestoreDC (hdc=0x33010903, nSavedDC=-1) returned 1 [0114.869] GdipReleaseDC (graphics=0x56086d8, hdc=0x33010903) returned 0x0 [0114.869] DrawTextExW (in: hdc=0x490108ba, lpchText="?", cchText=1, lprc=0x119dd60, format=0x102415, lpdtp=0x30b3c08 | out: lpchText="?", lprc=0x119dd60) returned 13 [0114.869] GdipCreateRegion (region=0x119ddb4) returned 0x0 [0114.869] GdipGetClip (graphics=0x56086d8, region=0x56199d8) returned 0x0 [0114.869] GdipCreateMatrix (matrix=0x119ddb4) returned 0x0 [0114.869] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608a48) returned 0x0 [0114.869] GdipIsMatrixIdentity (matrix=0x5608a48, result=0x119ddcc) returned 0x0 [0114.869] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626c78 [0114.869] GdipGetMatrixElements (matrix=0x5608a48, matrixOut=0x1626c78) returned 0x0 [0114.869] LocalFree (hMem=0x1626c78) returned 0x0 [0114.869] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626d20 [0114.869] GdipGetMatrixElements (matrix=0x5608a48, matrixOut=0x1626d20) returned 0x0 [0114.869] LocalFree (hMem=0x1626d20) returned 0x0 [0114.869] GdipDeleteMatrix (matrix=0x5608a48) returned 0x0 [0114.869] GdipIsInfiniteRegion (region=0x56199d8, graphics=0x56086d8, result=0x119ddf8) returned 0x0 [0114.869] GdipIsInfiniteRegion (region=0x56199d8, graphics=0x56086d8, result=0x119dde8) returned 0x0 [0114.869] GdipGetRegionHRgn (region=0x56199d8, graphics=0x56086d8, hRgn=0x119dde8) returned 0x0 [0114.870] GdipDeleteRegion (region=0x56199d8) returned 0x0 [0114.870] GdipGetDC (graphics=0x56086d8, hdc=0x119de00) returned 0x0 [0114.870] GetCurrentObject (hdc=0x33010903, type=0x1) returned 0x1b00017 [0114.870] GetCurrentObject (hdc=0x33010903, type=0x2) returned 0x1900010 [0114.870] GetCurrentObject (hdc=0x33010903, type=0x7) returned 0x610508cf [0114.870] GetCurrentObject (hdc=0x33010903, type=0x6) returned 0x18a0048 [0114.870] SaveDC (hdc=0x33010903) returned 1 [0114.870] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x720408c1 [0114.870] GetClipRgn (hdc=0x33010903, hrgn=0x720408c1) returned 0 [0114.870] SelectClipRgn (hdc=0x33010903, hrgn=0x83040894) returned 2 [0114.870] DeleteObject (ho=0x720408c1) returned 1 [0114.870] DeleteObject (ho=0x83040894) returned 1 [0114.870] OffsetViewportOrgEx (in: hdc=0x33010903, x=0, y=0, lppt=0x30b3e00 | out: lppt=0x30b3e00) returned 1 [0114.870] GetNearestColor (hdc=0x33010903, color=0xc0) returned 0xc0 [0114.870] CreateSolidBrush (color=0xc0) returned 0x4c10086a [0114.870] FillRect (hDC=0x33010903, lprc=0x119de04, hbr=0x4c10086a) returned 1 [0114.870] DeleteObject (ho=0x4c10086a) returned 1 [0114.870] RestoreDC (hdc=0x33010903, nSavedDC=-1) returned 1 [0114.870] GdipReleaseDC (graphics=0x56086d8, hdc=0x33010903) returned 0x0 [0114.870] GdipGetTextRenderingHint (graphics=0x56086d8, mode=0x119de80) returned 0x0 [0114.870] GdipGetDC (graphics=0x56086d8, hdc=0x119de6c) returned 0x0 [0114.870] GetCurrentObject (hdc=0x33010903, type=0x1) returned 0x1b00017 [0114.870] GetCurrentObject (hdc=0x33010903, type=0x2) returned 0x1900010 [0114.870] GetCurrentObject (hdc=0x33010903, type=0x7) returned 0x610508cf [0114.870] GetCurrentObject (hdc=0x33010903, type=0x6) returned 0x18a0048 [0114.870] SaveDC (hdc=0x33010903) returned 1 [0114.870] GetTextAlign (hdc=0x33010903) returned 0x0 [0114.870] GetTextColor (hdc=0x33010903) returned 0x0 [0114.870] SetTextColor (hdc=0x33010903, color=0xf0f0f0) returned 0x0 [0114.870] GetCurrentObject (hdc=0x33010903, type=0x6) returned 0x18a0048 [0114.870] GetObjectW (in: h=0x18a0048, c=92, pv=0x119dbcc | out: pv=0x119dbcc) returned 92 [0114.870] SelectObject (hdc=0x33010903, h=0xb20a08b8) returned 0x18a0048 [0114.870] GetBkMode (hdc=0x33010903) returned 2 [0114.870] SetBkMode (hdc=0x33010903, mode=1) returned 2 [0114.870] DrawTextExW (in: hdc=0x33010903, lpchText="?", cchText=1, lprc=0x119dcb0, format=0x102415, lpdtp=0x30b40c0 | out: lpchText="?", lprc=0x119dcb0) returned 13 [0114.870] DrawTextExW (in: hdc=0x33010903, lpchText="?", cchText=1, lprc=0x119de00, format=0x102015, lpdtp=0x30b40c0 | out: lpchText="?", lprc=0x119de00) returned 13 [0114.870] RestoreDC (hdc=0x33010903, nSavedDC=-1) returned 1 [0114.870] GdipReleaseDC (graphics=0x56086d8, hdc=0x33010903) returned 0x0 [0114.870] GetFocus () returned 0x102d4 [0114.870] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119dee4) returned 0x0 [0114.871] GdipDrawRectangleI (graphics=0x56086d8, pen=0x56089b8, x=0, y=0, width=25, height=20) returned 0x0 [0114.871] GdipDeletePen (pen=0x56089b8) returned 0x0 [0114.871] GdipGetDC (graphics=0x56086d8, hdc=0x119e12c) returned 0x0 [0114.871] BitBlt (hdc=0xe010919, x=0, y=0, cx=26, cy=21, hdcSrc=0x33010903, x1=0, y1=0, rop=0xcc0020) returned 1 [0114.871] GdipReleaseDC (graphics=0x56086d8, hdc=0x33010903) returned 0x0 [0114.871] SelectPalette (hdc=0xe010919, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.871] SelectObject (hdc=0x33010903, h=0x185000f) returned 0x610508cf [0114.871] DeleteDC (hdc=0x33010903) returned 1 [0114.871] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0114.871] EndPaint (hWnd=0x102bc, lpPaint=0x119e0d0) returned 1 [0114.871] BeginPaint (in: hWnd=0x102be, lpPaint=0x119e0d8 | out: lpPaint=0x119e0d8) returned 0x470108fd [0114.871] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.871] CreateCompatibleDC (hdc=0x470108fd) returned 0x35010903 [0114.871] SelectObject (hdc=0x35010903, h=0x610508cf) returned 0x185000f [0114.871] GdipCreateFromHDC (hdc=0x35010903, graphics=0x119e0d0) returned 0x0 [0114.871] GdipTranslateWorldTransform (graphics=0x56086d8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0114.871] GdipSetClipRectI (graphics=0x56086d8, x=0, y=0, width=243, height=13, combineMode=0x0) returned 0x0 [0114.871] GdipCreateMatrix (matrix=0x119e138) returned 0x0 [0114.871] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x56199a8) returned 0x0 [0114.871] GdipIsMatrixIdentity (matrix=0x56199a8, result=0x119e150) returned 0x0 [0114.871] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626c78 [0114.871] GdipGetMatrixElements (matrix=0x56199a8, matrixOut=0x1626c78) returned 0x0 [0114.871] LocalFree (hMem=0x1626c78) returned 0x0 [0114.871] GdipDeleteMatrix (matrix=0x56199a8) returned 0x0 [0114.871] GdipCreateRegion (region=0x119e138) returned 0x0 [0114.871] GdipGetClip (graphics=0x56086d8, region=0x56199d8) returned 0x0 [0114.871] GdipIsInfiniteRegion (region=0x56199d8, graphics=0x56086d8, result=0x119e144) returned 0x0 [0114.871] GdipSaveGraphics (graphics=0x56086d8, state=0x119e170) returned 0x0 [0114.871] GetWindowTextLengthW (hWnd=0x102be) returned 43 [0114.871] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2b [0114.871] GetSystemMetrics (nIndex=42) returned 0 [0114.871] GetWindowTextW (in: hWnd=0x102be, lpString=0x119e034, nMaxCount=44 | out: lpString="https://www.youtube.com/watch?v=Ji9IwPId5Uk") returned 43 [0114.871] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0xd, wParam=0x2c, lParam=0x119e034) returned 0x2b [0114.871] GdipRestoreGraphics (graphics=0x56086d8, state=0xfd720dbd) returned 0x0 [0114.871] GdipDeleteRegion (region=0x56199d8) returned 0x0 [0114.871] GetWindowTextLengthW (hWnd=0x102be) returned 43 [0114.872] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2b [0114.872] GetSystemMetrics (nIndex=42) returned 0 [0114.872] GetWindowTextW (in: hWnd=0x102be, lpString=0x119e034, nMaxCount=44 | out: lpString="https://www.youtube.com/watch?v=Ji9IwPId5Uk") returned 43 [0114.872] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102be, Msg=0xd, wParam=0x2c, lParam=0x119e034) returned 0x2b [0114.872] GdipCreateSolidFill (color=0xfff0f0f0, brush=0x119df84) returned 0x0 [0114.872] GdipCreateSolidFill (color=0xff4169e1, brush=0x119df84) returned 0x0 [0114.872] GetClientRect (in: hWnd=0x102be, lpRect=0x119def0 | out: lpRect=0x119def0) returned 1 [0114.872] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119dd1c, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8bythâ\x19\x01\x04E\x0b\x03\x18", lpUsedDefaultChar=0x0) returned 17 [0114.872] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0114.872] GdipCreateRegion (region=0x119dd2c) returned 0x0 [0114.872] GdipGetClip (graphics=0x56086d8, region=0x56199d8) returned 0x0 [0114.872] GdipCreateMatrix (matrix=0x119dd2c) returned 0x0 [0114.872] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608b78) returned 0x0 [0114.872] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119dd44) returned 0x0 [0114.872] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626af0 [0114.872] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x1626af0) returned 0x0 [0114.872] LocalFree (hMem=0x1626af0) returned 0x0 [0114.872] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626a48 [0114.872] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x1626a48) returned 0x0 [0114.872] LocalFree (hMem=0x1626a48) returned 0x0 [0114.872] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0114.872] GdipIsInfiniteRegion (region=0x56199d8, graphics=0x56086d8, result=0x119dd70) returned 0x0 [0114.872] GdipIsInfiniteRegion (region=0x56199d8, graphics=0x56086d8, result=0x119dd60) returned 0x0 [0114.872] GdipGetRegionHRgn (region=0x56199d8, graphics=0x56086d8, hRgn=0x119dd60) returned 0x0 [0114.872] GdipDeleteRegion (region=0x56199d8) returned 0x0 [0114.872] GdipGetDC (graphics=0x56086d8, hdc=0x119dd78) returned 0x0 [0114.872] GetCurrentObject (hdc=0x35010903, type=0x1) returned 0x1b00017 [0114.872] GetCurrentObject (hdc=0x35010903, type=0x2) returned 0x1900010 [0114.872] GetCurrentObject (hdc=0x35010903, type=0x7) returned 0x610508cf [0114.873] GetCurrentObject (hdc=0x35010903, type=0x6) returned 0x18a0048 [0114.873] SaveDC (hdc=0x35010903) returned 1 [0114.873] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x84040894 [0114.873] GetClipRgn (hdc=0x35010903, hrgn=0x84040894) returned 0 [0114.873] SelectClipRgn (hdc=0x35010903, hrgn=0x750408c1) returned 2 [0114.873] DeleteObject (ho=0x84040894) returned 1 [0114.873] DeleteObject (ho=0x750408c1) returned 1 [0114.873] OffsetViewportOrgEx (in: hdc=0x35010903, x=0, y=0, lppt=0x30b470c | out: lppt=0x30b470c) returned 1 [0114.873] OffsetViewportOrgEx (in: hdc=0x35010903, x=-11, y=-44, lppt=0x30b471c | out: lppt=0x30b471c) returned 1 [0114.873] GetClientRect (in: hWnd=0x102ba, lpRect=0x119dda4 | out: lpRect=0x119dda4) returned 1 [0114.873] GetCurrentObject (hdc=0x35010903, type=0x1) returned 0x1b00017 [0114.873] GetCurrentObject (hdc=0x35010903, type=0x2) returned 0x1900010 [0114.873] GetCurrentObject (hdc=0x35010903, type=0x7) returned 0x610508cf [0114.873] GetCurrentObject (hdc=0x35010903, type=0x6) returned 0x18a0048 [0114.873] SaveDC (hdc=0x35010903) returned 2 [0114.873] GetNearestColor (hdc=0x35010903, color=0x0) returned 0x0 [0114.873] CreateSolidBrush (color=0x0) returned 0x4d10086a [0114.873] FillRect (hDC=0x35010903, lprc=0x119dc44, hbr=0x4d10086a) returned 1 [0114.873] DeleteObject (ho=0x4d10086a) returned 1 [0114.873] RestoreDC (hdc=0x35010903, nSavedDC=-1) returned 1 [0114.873] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119dca4, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8bythâ\x19\x01(G\x0b\x03\x18", lpUsedDefaultChar=0x0) returned 17 [0114.873] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0114.873] SelectPalette (hdc=0x35010903, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.873] GdipCreateFromHDC (hdc=0x35010903, graphics=0x119dbc8) returned 0x0 [0114.873] GdipSetPageUnit (graphics=0x5618d48, unit=0x2) returned 0x0 [0114.873] GdipCreateMatrix (matrix=0x119db88) returned 0x0 [0114.873] GdipGetWorldTransform (graphics=0x5618d48, matrix=0x56199a8) returned 0x0 [0114.874] GdipIsMatrixIdentity (matrix=0x56199a8, result=0x119dba0) returned 0x0 [0114.874] GdipDeleteMatrix (matrix=0x56199a8) returned 0x0 [0114.874] GdipCreateRegion (region=0x119db88) returned 0x0 [0114.874] GdipGetClip (graphics=0x5618d48, region=0x56199d8) returned 0x0 [0114.874] GdipIsInfiniteRegion (region=0x56199d8, graphics=0x5618d48, result=0x119db94) returned 0x0 [0114.874] GdipDeleteRegion (region=0x56199d8) returned 0x0 [0114.874] GdipSaveGraphics (graphics=0x5618d48, state=0x119dbc0) returned 0x0 [0114.874] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119dba4) returned 0x0 [0114.874] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119dba4) returned 0x0 [0114.874] GdipCreateRegion (region=0x119db44) returned 0x0 [0114.874] GdipGetClip (graphics=0x5618d48, region=0x56193b8) returned 0x0 [0114.874] GdipCreateMatrix (matrix=0x119db44) returned 0x0 [0114.874] GdipGetWorldTransform (graphics=0x5618d48, matrix=0x5608b78) returned 0x0 [0114.874] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119db5c) returned 0x0 [0114.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626ab8 [0114.874] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x1626ab8) returned 0x0 [0114.874] LocalFree (hMem=0x1626ab8) returned 0x0 [0114.874] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0114.874] GdipIsInfiniteRegion (region=0x56193b8, graphics=0x5618d48, result=0x119db88) returned 0x0 [0114.874] GdipDeleteRegion (region=0x56193b8) returned 0x0 [0114.874] GdipGetDC (graphics=0x5618d48, hdc=0x119db90) returned 0x0 [0114.874] GetCurrentObject (hdc=0x35010903, type=0x1) returned 0x1b00017 [0114.874] GetCurrentObject (hdc=0x35010903, type=0x2) returned 0x1900010 [0114.874] GetCurrentObject (hdc=0x35010903, type=0x7) returned 0x610508cf [0114.874] GetCurrentObject (hdc=0x35010903, type=0x6) returned 0x18a0048 [0114.874] SaveDC (hdc=0x35010903) returned 2 [0114.874] OffsetViewportOrgEx (in: hdc=0x35010903, x=0, y=0, lppt=0x30b4b28 | out: lppt=0x30b4b28) returned 1 [0114.874] GetWindowTextLengthW (hWnd=0x102ba) returned 22 [0114.874] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0114.874] GetSystemMetrics (nIndex=42) returned 0 [0114.874] GetWindowTextW (in: hWnd=0x102ba, lpString=0x119daf0, nMaxCount=23 | out: lpString="How to buy your file ?") returned 22 [0114.874] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xd, wParam=0x17, lParam=0x119daf0) returned 0x16 [0114.874] GetCurrentObject (hdc=0x35010903, type=0x6) returned 0x18a0048 [0114.874] GetObjectW (in: h=0x18a0048, c=92, pv=0x119da70 | out: pv=0x119da70) returned 92 [0114.874] SelectObject (hdc=0x35010903, h=0xb20a08b8) returned 0x18a0048 [0114.875] DrawTextExW (in: hdc=0x35010903, lpchText="How to buy your file ?", cchText=22, lprc=0x119dbac, format=0x102410, lpdtp=0x30b4c14 | out: lpchText="How to buy your file ?", lprc=0x119dbac) returned 13 [0114.875] GetWindowTextLengthW (hWnd=0x102ba) returned 22 [0114.875] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0114.875] GetSystemMetrics (nIndex=42) returned 0 [0114.875] GetWindowTextW (in: hWnd=0x102ba, lpString=0x119daf0, nMaxCount=23 | out: lpString="How to buy your file ?") returned 22 [0114.875] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102ba, Msg=0xd, wParam=0x17, lParam=0x119daf0) returned 0x16 [0114.875] GetTextAlign (hdc=0x35010903) returned 0x0 [0114.875] GetTextColor (hdc=0x35010903) returned 0x0 [0114.875] SetTextColor (hdc=0x35010903, color=0xf0f0f0) returned 0x0 [0114.875] GetCurrentObject (hdc=0x35010903, type=0x6) returned 0xb20a08b8 [0114.875] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119d91c | out: pv=0x119d91c) returned 92 [0114.875] GetBkMode (hdc=0x35010903) returned 2 [0114.875] SetBkMode (hdc=0x35010903, mode=1) returned 2 [0114.875] DrawTextExW (in: hdc=0x35010903, lpchText="How to buy your file ?", cchText=22, lprc=0x119db50, format=0x102010, lpdtp=0x30b4eb8 | out: lpchText="How to buy your file ?", lprc=0x119db50) returned 13 [0114.875] RestoreDC (hdc=0x35010903, nSavedDC=-1) returned 1 [0114.875] GdipReleaseDC (graphics=0x5618d48, hdc=0x35010903) returned 0x0 [0114.875] GdipDrawLineI (graphics=0x5618d48, pen=0x56089b8, x1=1, y1=6, x2=1, y2=93) returned 0x0 [0114.875] GdipDrawLineI (graphics=0x5618d48, pen=0x56199d8, x1=0, y1=6, x2=0, y2=92) returned 0x0 [0114.875] GdipDrawLineI (graphics=0x5618d48, pen=0x56089b8, x1=0, y1=93, x2=340, y2=93) returned 0x0 [0114.875] GdipDrawLineI (graphics=0x5618d48, pen=0x56199d8, x1=0, y1=92, x2=339, y2=92) returned 0x0 [0114.875] GdipDrawLineI (graphics=0x5618d48, pen=0x56199d8, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0114.875] GdipDrawLineI (graphics=0x5618d48, pen=0x56089b8, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0114.875] GdipDrawLineI (graphics=0x5618d48, pen=0x56199d8, x1=117, y1=5, x2=338, y2=5) returned 0x0 [0114.875] GdipDrawLineI (graphics=0x5618d48, pen=0x56089b8, x1=117, y1=6, x2=339, y2=6) returned 0x0 [0114.875] GdipDrawLineI (graphics=0x5618d48, pen=0x56089b8, x1=339, y1=5, x2=339, y2=93) returned 0x0 [0114.875] GdipDrawLineI (graphics=0x5618d48, pen=0x56199d8, x1=338, y1=6, x2=338, y2=92) returned 0x0 [0114.875] GdipDeletePen (pen=0x56089b8) returned 0x0 [0114.875] GdipDeletePen (pen=0x56199d8) returned 0x0 [0114.875] GdipDeleteGraphics (graphics=0x5618d48) returned 0x0 [0114.875] SelectPalette (hdc=0x35010903, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.876] RestoreDC (hdc=0x35010903, nSavedDC=-1) returned 1 [0114.876] GdipReleaseDC (graphics=0x56086d8, hdc=0x35010903) returned 0x0 [0114.876] GdipCreateRegion (region=0x119df88) returned 0x0 [0114.876] GdipGetClip (graphics=0x56086d8, region=0x56089b8) returned 0x0 [0114.876] GdipSetClipRegion (graphics=0x56086d8, region=0x56089b8, combineMode=0x0) returned 0x0 [0114.876] GdipCreateMatrix (matrix=0x119df88) returned 0x0 [0114.876] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608ba8) returned 0x0 [0114.876] GdipGetRegionScansCount (region=0x5608c28, count=0x119df80, matrix=0x5608ba8) returned 0x0 [0114.876] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x1623150 [0114.876] GdipGetRegionScans (region=0x5608c28, rects=0x1623150, count=0x119df80, matrix=0x5608ba8) returned 0x0 [0114.876] LocalFree (hMem=0x1623150) returned 0x0 [0114.876] GdipCreateRegionRect (rect=0x119df78, region=0x119df88) returned 0x0 [0114.876] GdipSetClipRegion (graphics=0x56086d8, region=0x5603518, combineMode=0x4) returned 0x0 [0114.876] GdipDeleteRegion (region=0x5603518) returned 0x0 [0114.876] GdipCreateRegionRect (rect=0x119ddfc, region=0x119de0c) returned 0x0 [0114.876] GdipSetClipRegion (graphics=0x56086d8, region=0x5603518, combineMode=0x0) returned 0x0 [0114.876] GdipGetDC (graphics=0x56086d8, hdc=0x119de20) returned 0x0 [0114.876] GetCurrentObject (hdc=0x35010903, type=0x1) returned 0x1b00017 [0114.876] GetCurrentObject (hdc=0x35010903, type=0x2) returned 0x1900010 [0114.876] GetCurrentObject (hdc=0x35010903, type=0x7) returned 0x610508cf [0114.876] GetCurrentObject (hdc=0x35010903, type=0x6) returned 0x18a0048 [0114.876] SaveDC (hdc=0x35010903) returned 1 [0114.876] GetNearestColor (hdc=0x35010903, color=0xe16941) returned 0xe16941 [0114.876] RestoreDC (hdc=0x35010903, nSavedDC=-1) returned 1 [0114.876] GdipReleaseDC (graphics=0x56086d8, hdc=0x35010903) returned 0x0 [0114.876] GdipGetTextRenderingHint (graphics=0x56086d8, mode=0x119ddc0) returned 0x0 [0114.876] GdipGetDC (graphics=0x56086d8, hdc=0x119ddac) returned 0x0 [0114.876] GetCurrentObject (hdc=0x35010903, type=0x1) returned 0x1b00017 [0114.876] GetCurrentObject (hdc=0x35010903, type=0x2) returned 0x1900010 [0114.876] GetCurrentObject (hdc=0x35010903, type=0x7) returned 0x610508cf [0114.876] GetCurrentObject (hdc=0x35010903, type=0x6) returned 0x18a0048 [0114.876] SaveDC (hdc=0x35010903) returned 1 [0114.876] GetTextAlign (hdc=0x35010903) returned 0x0 [0114.876] GetTextColor (hdc=0x35010903) returned 0x0 [0114.876] SetTextColor (hdc=0x35010903, color=0xe16941) returned 0x0 [0114.876] GetCurrentObject (hdc=0x35010903, type=0x6) returned 0x18a0048 [0114.877] GetObjectW (in: h=0x18a0048, c=92, pv=0x119db0c | out: pv=0x119db0c) returned 92 [0114.877] SelectObject (hdc=0x35010903, h=0x860a0555) returned 0x18a0048 [0114.877] GetBkMode (hdc=0x35010903) returned 2 [0114.877] SetBkMode (hdc=0x35010903, mode=1) returned 2 [0114.877] DrawTextExW (in: hdc=0x35010903, lpchText="https://www.youtube.com/watch?v=Ji9IwPId5Uk", cchText=43, lprc=0x119dd40, format=0x100000, lpdtp=0x30b60b8 | out: lpchText="https://www.youtube.com/watch?v=Ji9IwPId5Uk", lprc=0x119dd40) returned 13 [0114.877] RestoreDC (hdc=0x35010903, nSavedDC=-1) returned 1 [0114.877] GdipReleaseDC (graphics=0x56086d8, hdc=0x35010903) returned 0x0 [0114.877] GetFocus () returned 0x102d4 [0114.877] GdipSetClipRegion (graphics=0x56086d8, region=0x56089b8, combineMode=0x0) returned 0x0 [0114.877] GdipDeleteBrush (brush=0x5608a48) returned 0x0 [0114.877] GdipDeleteBrush (brush=0x56033e8) returned 0x0 [0114.877] GdipGetDC (graphics=0x56086d8, hdc=0x119e130) returned 0x0 [0114.877] BitBlt (hdc=0x470108fd, x=0, y=0, cx=243, cy=13, hdcSrc=0x35010903, x1=0, y1=0, rop=0xcc0020) returned 1 [0114.877] GdipReleaseDC (graphics=0x56086d8, hdc=0x35010903) returned 0x0 [0114.877] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.877] SelectObject (hdc=0x35010903, h=0x185000f) returned 0x610508cf [0114.877] DeleteDC (hdc=0x35010903) returned 1 [0114.877] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0114.877] EndPaint (hWnd=0x102be, lpPaint=0x119e0d4) returned 1 [0114.877] BeginPaint (in: hWnd=0x102c0, lpPaint=0x119e0e0 | out: lpPaint=0x119e0e0) returned 0x50108bd [0114.877] SelectPalette (hdc=0x50108bd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.877] CreateCompatibleDC (hdc=0x50108bd) returned 0x37010903 [0114.877] GetObjectType (h=0x50108bd) returned 0x3 [0114.877] CreateCompatibleBitmap (hdc=0x50108bd, cx=1, cy=1) returned 0x2b05090d [0114.877] GetDIBits (in: hdc=0x50108bd, hbm=0x2b05090d, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119db70, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119db70) returned 1 [0114.877] GetDIBits (in: hdc=0x50108bd, hbm=0x2b05090d, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119db70, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119db70) returned 1 [0114.878] DeleteObject (ho=0x2b05090d) returned 1 [0114.878] CreateDIBSection (in: hdc=0x50108bd, lpbmi=0x119dbc0, usage=0x0, ppvBits=0x119e0b4, hSection=0x0, offset=0x0 | out: ppvBits=0x119e0b4) returned 0x3605058a [0114.878] SelectObject (hdc=0x37010903, h=0x3605058a) returned 0x185000f [0114.878] GdipCreateFromHDC (hdc=0x37010903, graphics=0x119e098) returned 0x0 [0114.878] GdipTranslateWorldTransform (graphics=0x56086d8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0114.878] GdipSetClipRectI (graphics=0x56086d8, x=0, y=0, width=328, height=73, combineMode=0x0) returned 0x0 [0114.878] GdipCreateMatrix (matrix=0x119e140) returned 0x0 [0114.878] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608bd8) returned 0x0 [0114.878] GdipIsMatrixIdentity (matrix=0x5608bd8, result=0x119e158) returned 0x0 [0114.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x16268c0 [0114.878] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x16268c0) returned 0x0 [0114.878] LocalFree (hMem=0x16268c0) returned 0x0 [0114.878] GdipDeleteMatrix (matrix=0x5608bd8) returned 0x0 [0114.878] GdipCreateRegion (region=0x119e140) returned 0x0 [0114.878] GdipGetClip (graphics=0x56086d8, region=0x56035a8) returned 0x0 [0114.878] GdipIsInfiniteRegion (region=0x56035a8, graphics=0x56086d8, result=0x119e14c) returned 0x0 [0114.878] GdipSaveGraphics (graphics=0x56086d8, state=0x119e178) returned 0x0 [0114.878] GetWindowTextLengthW (hWnd=0x102c0) returned 135 [0114.878] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x87 [0114.878] GetSystemMetrics (nIndex=42) returned 0 [0114.878] GetWindowTextW (in: hWnd=0x102c0, lpString=0x119df84, nMaxCount=136 | out: lpString="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n") returned 135 [0114.878] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0xd, wParam=0x88, lParam=0x119df84) returned 0x87 [0114.878] GetClientRect (in: hWnd=0x102c0, lpRect=0x119e140 | out: lpRect=0x119e140) returned 1 [0114.878] GdipCreateRegion (region=0x119df90) returned 0x0 [0114.878] GdipGetClip (graphics=0x56086d8, region=0x56033e8) returned 0x0 [0114.878] GdipCreateMatrix (matrix=0x119df90) returned 0x0 [0114.878] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5603478) returned 0x0 [0114.878] GdipIsMatrixIdentity (matrix=0x5603478, result=0x119dfa8) returned 0x0 [0114.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626d20 [0114.878] GdipGetMatrixElements (matrix=0x5603478, matrixOut=0x1626d20) returned 0x0 [0114.878] LocalFree (hMem=0x1626d20) returned 0x0 [0114.878] GdipCombineRegionRegion (region=0x56033e8, region2=0x56035a8, combineMode=0x1) returned 0x0 [0114.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626dc8 [0114.878] GdipGetMatrixElements (matrix=0x5603478, matrixOut=0x1626dc8) returned 0x0 [0114.879] LocalFree (hMem=0x1626dc8) returned 0x0 [0114.879] GdipDeleteMatrix (matrix=0x5603478) returned 0x0 [0114.879] GdipIsInfiniteRegion (region=0x56033e8, graphics=0x56086d8, result=0x119dfd4) returned 0x0 [0114.879] GdipIsInfiniteRegion (region=0x56033e8, graphics=0x56086d8, result=0x119dfc4) returned 0x0 [0114.879] GdipGetRegionHRgn (region=0x56033e8, graphics=0x56086d8, hRgn=0x119dfc4) returned 0x0 [0114.879] GdipDeleteRegion (region=0x56033e8) returned 0x0 [0114.879] GdipGetDC (graphics=0x56086d8, hdc=0x119dfdc) returned 0x0 [0114.879] GetCurrentObject (hdc=0x37010903, type=0x1) returned 0x1b00017 [0114.879] GetCurrentObject (hdc=0x37010903, type=0x2) returned 0x1900010 [0114.879] GetCurrentObject (hdc=0x37010903, type=0x7) returned 0x3605058a [0114.879] GetCurrentObject (hdc=0x37010903, type=0x6) returned 0x18a0048 [0114.879] SaveDC (hdc=0x37010903) returned 1 [0114.879] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x760408c1 [0114.879] GetClipRgn (hdc=0x37010903, hrgn=0x760408c1) returned 0 [0114.879] SelectClipRgn (hdc=0x37010903, hrgn=0x88040894) returned 2 [0114.879] DeleteObject (ho=0x760408c1) returned 1 [0114.879] DeleteObject (ho=0x88040894) returned 1 [0114.879] OffsetViewportOrgEx (in: hdc=0x37010903, x=0, y=0, lppt=0x30b77ac | out: lppt=0x30b77ac) returned 1 [0114.879] GetNearestColor (hdc=0x37010903, color=0x0) returned 0x0 [0114.879] CreateSolidBrush (color=0x0) returned 0x4e10086a [0114.879] FillRect (hDC=0x37010903, lprc=0x119dfe0, hbr=0x4e10086a) returned 1 [0114.881] DeleteObject (ho=0x4e10086a) returned 1 [0114.881] RestoreDC (hdc=0x37010903, nSavedDC=-1) returned 1 [0114.881] GdipReleaseDC (graphics=0x56086d8, hdc=0x37010903) returned 0x0 [0114.881] GdipRestoreGraphics (graphics=0x56086d8, state=0xfd6e0dbd) returned 0x0 [0114.881] GdipDeleteRegion (region=0x56035a8) returned 0x0 [0114.881] GetWindowTextLengthW (hWnd=0x102c0) returned 135 [0114.881] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x87 [0114.881] GetSystemMetrics (nIndex=42) returned 0 [0114.881] GetWindowTextW (in: hWnd=0x102c0, lpString=0x119df84, nMaxCount=136 | out: lpString="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n") returned 135 [0114.881] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c0, Msg=0xd, wParam=0x88, lParam=0x119df84) returned 0x87 [0114.881] GdipGetDC (graphics=0x56086d8, hdc=0x119dffc) returned 0x0 [0114.881] GetCurrentObject (hdc=0x37010903, type=0x1) returned 0x1b00017 [0114.881] GetCurrentObject (hdc=0x37010903, type=0x2) returned 0x1900010 [0114.881] GetCurrentObject (hdc=0x37010903, type=0x7) returned 0x3605058a [0114.881] GetCurrentObject (hdc=0x37010903, type=0x6) returned 0x18a0048 [0114.881] SaveDC (hdc=0x37010903) returned 1 [0114.882] GetNearestColor (hdc=0x37010903, color=0xf0f0f0) returned 0xf0f0f0 [0114.882] RestoreDC (hdc=0x37010903, nSavedDC=-1) returned 1 [0114.882] GdipReleaseDC (graphics=0x56086d8, hdc=0x37010903) returned 0x0 [0114.882] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.882] AdjustWindowRectEx (in: lpRect=0x119df20, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119df20) returned 1 [0114.882] GdipGetTextRenderingHint (graphics=0x56086d8, mode=0x119df9c) returned 0x0 [0114.882] GdipGetDC (graphics=0x56086d8, hdc=0x119df88) returned 0x0 [0114.882] GetCurrentObject (hdc=0x37010903, type=0x1) returned 0x1b00017 [0114.882] GetCurrentObject (hdc=0x37010903, type=0x2) returned 0x1900010 [0114.882] GetCurrentObject (hdc=0x37010903, type=0x7) returned 0x3605058a [0114.882] GetCurrentObject (hdc=0x37010903, type=0x6) returned 0x18a0048 [0114.882] SaveDC (hdc=0x37010903) returned 1 [0114.882] GetTextAlign (hdc=0x37010903) returned 0x0 [0114.883] GetTextColor (hdc=0x37010903) returned 0x0 [0114.883] SetTextColor (hdc=0x37010903, color=0xf0f0f0) returned 0x0 [0114.883] GetCurrentObject (hdc=0x37010903, type=0x6) returned 0x18a0048 [0114.883] GetObjectW (in: h=0x18a0048, c=92, pv=0x119dce8 | out: pv=0x119dce8) returned 92 [0114.883] SelectObject (hdc=0x37010903, h=0xb20a08b8) returned 0x18a0048 [0114.883] GetBkMode (hdc=0x37010903) returned 2 [0114.883] SetBkMode (hdc=0x37010903, mode=1) returned 2 [0114.883] DrawTextExW (in: hdc=0x37010903, lpchText="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n", cchText=135, lprc=0x119df1c, format=0x100000, lpdtp=0x30b7fcc | out: lpchText="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n", lprc=0x119df1c) returned 78 [0114.883] RestoreDC (hdc=0x37010903, nSavedDC=-1) returned 1 [0114.883] GdipReleaseDC (graphics=0x56086d8, hdc=0x37010903) returned 0x0 [0114.883] GdipGetDC (graphics=0x56086d8, hdc=0x119e138) returned 0x0 [0114.883] BitBlt (hdc=0x50108bd, x=0, y=0, cx=328, cy=73, hdcSrc=0x37010903, x1=0, y1=0, rop=0xcc0020) returned 1 [0114.883] GdipReleaseDC (graphics=0x56086d8, hdc=0x37010903) returned 0x0 [0114.883] SelectPalette (hdc=0x50108bd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.883] SelectObject (hdc=0x37010903, h=0x185000f) returned 0x3605058a [0114.883] DeleteDC (hdc=0x37010903) returned 1 [0114.883] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0114.883] DeleteObject (ho=0x3605058a) returned 1 [0114.884] EndPaint (hWnd=0x102c0, lpPaint=0x119e0dc) returned 1 [0114.884] BeginPaint (in: hWnd=0x102c2, lpPaint=0x119e110 | out: lpPaint=0x119e110) returned 0xe010919 [0114.884] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.884] GetWindowTextLengthW (hWnd=0x102c2) returned 7 [0114.884] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0114.884] GetSystemMetrics (nIndex=42) returned 0 [0114.884] GetWindowTextW (in: hWnd=0x102c2, lpString=0x119e0b4, nMaxCount=8 | out: lpString="Message") returned 7 [0114.884] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0xd, wParam=0x8, lParam=0x119e0b4) returned 0x7 [0114.884] GetClientRect (in: hWnd=0x102c2, lpRect=0x119e170 | out: lpRect=0x119e170) returned 1 [0114.884] GetCurrentObject (hdc=0xe010919, type=0x1) returned 0x1b00017 [0114.884] GetCurrentObject (hdc=0xe010919, type=0x2) returned 0x1900010 [0114.884] GetCurrentObject (hdc=0xe010919, type=0x7) returned 0xf0506d3 [0114.884] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0114.884] SaveDC (hdc=0xe010919) returned 1 [0114.884] GetNearestColor (hdc=0xe010919, color=0x0) returned 0x0 [0114.884] CreateSolidBrush (color=0x0) returned 0x4f10086a [0114.884] FillRect (hDC=0xe010919, lprc=0x119e010, hbr=0x4f10086a) returned 1 [0114.884] DeleteObject (ho=0x4f10086a) returned 1 [0114.884] RestoreDC (hdc=0xe010919, nSavedDC=-1) returned 1 [0114.884] GetWindowTextLengthW (hWnd=0x102c2) returned 7 [0114.884] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0114.884] GetSystemMetrics (nIndex=42) returned 0 [0114.884] GetWindowTextW (in: hWnd=0x102c2, lpString=0x119e0b4, nMaxCount=8 | out: lpString="Message") returned 7 [0114.884] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0xd, wParam=0x8, lParam=0x119e0b4) returned 0x7 [0114.884] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119e070, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8byt â\x19\x01\x04\x80\x0b\x03\x18", lpUsedDefaultChar=0x0) returned 17 [0114.885] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0114.885] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x4b08085a [0114.885] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119df94) returned 0x0 [0114.885] GdipSetPageUnit (graphics=0x56086d8, unit=0x2) returned 0x0 [0114.885] GdipCreateMatrix (matrix=0x119df54) returned 0x0 [0114.885] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608bd8) returned 0x0 [0114.885] GdipIsMatrixIdentity (matrix=0x5608bd8, result=0x119df6c) returned 0x0 [0114.885] GdipDeleteMatrix (matrix=0x5608bd8) returned 0x0 [0114.885] GdipCreateRegion (region=0x119df54) returned 0x0 [0114.885] GdipGetClip (graphics=0x56086d8, region=0x56035a8) returned 0x0 [0114.885] GdipIsInfiniteRegion (region=0x56035a8, graphics=0x56086d8, result=0x119df60) returned 0x0 [0114.885] GdipDeleteRegion (region=0x56035a8) returned 0x0 [0114.885] GdipSaveGraphics (graphics=0x56086d8, state=0x119df8c) returned 0x0 [0114.885] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119df70) returned 0x0 [0114.885] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119df70) returned 0x0 [0114.885] GdipCreateRegion (region=0x119df10) returned 0x0 [0114.885] GdipGetClip (graphics=0x56086d8, region=0x5618fa8) returned 0x0 [0114.885] GdipCreateMatrix (matrix=0x119df10) returned 0x0 [0114.885] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608b78) returned 0x0 [0114.885] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119df28) returned 0x0 [0114.885] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626b28 [0114.885] GdipGetMatrixElements (matrix=0x5608b78, matrixOut=0x1626b28) returned 0x0 [0114.885] LocalFree (hMem=0x1626b28) returned 0x0 [0114.885] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0114.885] GdipIsInfiniteRegion (region=0x5618fa8, graphics=0x56086d8, result=0x119df54) returned 0x0 [0114.885] GdipDeleteRegion (region=0x5618fa8) returned 0x0 [0114.885] GdipGetDC (graphics=0x56086d8, hdc=0x119df5c) returned 0x0 [0114.885] GetCurrentObject (hdc=0xe010919, type=0x1) returned 0x1b00017 [0114.885] GetCurrentObject (hdc=0xe010919, type=0x2) returned 0x1900010 [0114.885] GetCurrentObject (hdc=0xe010919, type=0x7) returned 0xf0506d3 [0114.885] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0114.885] SaveDC (hdc=0xe010919) returned 1 [0114.885] OffsetViewportOrgEx (in: hdc=0xe010919, x=0, y=0, lppt=0x30b8558 | out: lppt=0x30b8558) returned 1 [0114.885] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0114.885] GetObjectW (in: h=0x18a0048, c=92, pv=0x119de3c | out: pv=0x119de3c) returned 92 [0114.886] SelectObject (hdc=0xe010919, h=0xb20a08b8) returned 0x18a0048 [0114.886] DrawTextExW (in: hdc=0xe010919, lpchText="Message", cchText=7, lprc=0x119df78, format=0x102410, lpdtp=0x30b8568 | out: lpchText="Message", lprc=0x119df78) returned 13 [0114.886] GetTextAlign (hdc=0xe010919) returned 0x0 [0114.886] GetTextColor (hdc=0xe010919) returned 0x0 [0114.886] SetTextColor (hdc=0xe010919, color=0xf0f0f0) returned 0x0 [0114.886] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0xb20a08b8 [0114.886] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119dce8 | out: pv=0x119dce8) returned 92 [0114.886] GetBkMode (hdc=0xe010919) returned 2 [0114.886] SetBkMode (hdc=0xe010919, mode=1) returned 2 [0114.886] DrawTextExW (in: hdc=0xe010919, lpchText="Message", cchText=7, lprc=0x119df1c, format=0x102010, lpdtp=0x30b8730 | out: lpchText="Message", lprc=0x119df1c) returned 13 [0114.886] RestoreDC (hdc=0xe010919, nSavedDC=-1) returned 1 [0114.886] GdipReleaseDC (graphics=0x56086d8, hdc=0xe010919) returned 0x0 [0114.886] GdipDrawLineI (graphics=0x56086d8, pen=0x56199d8, x1=1, y1=6, x2=1, y2=195) returned 0x0 [0114.886] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=0, y1=6, x2=0, y2=194) returned 0x0 [0114.886] GdipDrawLineI (graphics=0x56086d8, pen=0x56199d8, x1=0, y1=195, x2=363, y2=195) returned 0x0 [0114.886] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=0, y1=194, x2=362, y2=194) returned 0x0 [0114.887] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0114.887] GdipDrawLineI (graphics=0x56086d8, pen=0x56199d8, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0114.887] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=58, y1=5, x2=361, y2=5) returned 0x0 [0114.887] GdipDrawLineI (graphics=0x56086d8, pen=0x56199d8, x1=58, y1=6, x2=362, y2=6) returned 0x0 [0114.887] GdipDrawLineI (graphics=0x56086d8, pen=0x56199d8, x1=362, y1=5, x2=362, y2=195) returned 0x0 [0114.887] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=361, y1=6, x2=361, y2=194) returned 0x0 [0114.888] GdipDeletePen (pen=0x56199d8) returned 0x0 [0114.888] GdipDeletePen (pen=0x56035a8) returned 0x0 [0114.888] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0114.888] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=0) returned 0x4b08085a [0114.888] SelectPalette (hdc=0xe010919, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.888] EndPaint (hWnd=0x102c2, lpPaint=0x119e10c) returned 1 [0114.888] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0114.888] SendMessageW (hWnd=0x102c4, Msg=0x2111, wParam=0x40002c4, lParam=0x102c4) returned 0x0 [0114.888] SendMessageW (hWnd=0x102c4, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0114.888] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0114.888] BeginPaint (in: hWnd=0x102c6, lpPaint=0x119e110 | out: lpPaint=0x119e110) returned 0xe010919 [0114.888] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.888] GetWindowTextLengthW (hWnd=0x102c6) returned 8 [0114.888] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0114.888] GetSystemMetrics (nIndex=42) returned 0 [0114.888] GetWindowTextW (in: hWnd=0x102c6, lpString=0x119e0b0, nMaxCount=9 | out: lpString="Bictoins") returned 8 [0114.888] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xd, wParam=0x9, lParam=0x119e0b0) returned 0x8 [0114.888] GetClientRect (in: hWnd=0x102c6, lpRect=0x119e170 | out: lpRect=0x119e170) returned 1 [0114.888] GetCurrentObject (hdc=0xe010919, type=0x1) returned 0x1b00017 [0114.888] GetCurrentObject (hdc=0xe010919, type=0x2) returned 0x1900010 [0114.888] GetCurrentObject (hdc=0xe010919, type=0x7) returned 0xf0506d3 [0114.889] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0114.889] SaveDC (hdc=0xe010919) returned 1 [0114.889] GetNearestColor (hdc=0xe010919, color=0x0) returned 0x0 [0114.889] CreateSolidBrush (color=0x0) returned 0x5010086a [0114.889] FillRect (hDC=0xe010919, lprc=0x119e010, hbr=0x5010086a) returned 1 [0114.889] DeleteObject (ho=0x5010086a) returned 1 [0114.889] RestoreDC (hdc=0xe010919, nSavedDC=-1) returned 1 [0114.889] GetWindowTextLengthW (hWnd=0x102c6) returned 8 [0114.889] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0114.889] GetSystemMetrics (nIndex=42) returned 0 [0114.889] GetWindowTextW (in: hWnd=0x102c6, lpString=0x119e0b0, nMaxCount=9 | out: lpString="Bictoins") returned 8 [0114.889] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xd, wParam=0x9, lParam=0x119e0b0) returned 0x8 [0114.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.889] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119e070, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8byt â\x19\x01h\x87\x0b\x03\x18", lpUsedDefaultChar=0x0) returned 17 [0114.889] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0114.889] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x4b08085a [0114.889] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119df94) returned 0x0 [0114.889] GdipSetPageUnit (graphics=0x56086d8, unit=0x2) returned 0x0 [0114.889] GdipCreateMatrix (matrix=0x119df54) returned 0x0 [0114.889] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608bd8) returned 0x0 [0114.889] GdipIsMatrixIdentity (matrix=0x5608bd8, result=0x119df6c) returned 0x0 [0114.889] GdipDeleteMatrix (matrix=0x5608bd8) returned 0x0 [0114.889] GdipCreateRegion (region=0x119df54) returned 0x0 [0114.889] GdipGetClip (graphics=0x56086d8, region=0x56033e8) returned 0x0 [0114.889] GdipIsInfiniteRegion (region=0x56033e8, graphics=0x56086d8, result=0x119df60) returned 0x0 [0114.889] GdipDeleteRegion (region=0x56033e8) returned 0x0 [0114.889] GdipSaveGraphics (graphics=0x56086d8, state=0x119df8c) returned 0x0 [0114.889] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119df70) returned 0x0 [0114.889] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119df70) returned 0x0 [0114.889] GdipCreateRegion (region=0x119df10) returned 0x0 [0114.889] GdipGetClip (graphics=0x56086d8, region=0x5608ad8) returned 0x0 [0114.889] GdipCreateMatrix (matrix=0x119df10) returned 0x0 [0114.889] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608b68) returned 0x0 [0114.890] GdipIsMatrixIdentity (matrix=0x5608b68, result=0x119df28) returned 0x0 [0114.890] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626ee0 [0114.890] GdipGetMatrixElements (matrix=0x5608b68, matrixOut=0x1626ee0) returned 0x0 [0114.890] LocalFree (hMem=0x1626ee0) returned 0x0 [0114.890] GdipDeleteMatrix (matrix=0x5608b68) returned 0x0 [0114.890] GdipIsInfiniteRegion (region=0x5608ad8, graphics=0x56086d8, result=0x119df54) returned 0x0 [0114.890] GdipDeleteRegion (region=0x5608ad8) returned 0x0 [0114.890] GdipGetDC (graphics=0x56086d8, hdc=0x119df5c) returned 0x0 [0114.890] GetCurrentObject (hdc=0xe010919, type=0x1) returned 0x1b00017 [0114.890] GetCurrentObject (hdc=0xe010919, type=0x2) returned 0x1900010 [0114.890] GetCurrentObject (hdc=0xe010919, type=0x7) returned 0xf0506d3 [0114.890] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0114.890] SaveDC (hdc=0xe010919) returned 1 [0114.890] OffsetViewportOrgEx (in: hdc=0xe010919, x=0, y=0, lppt=0x30b8cd4 | out: lppt=0x30b8cd4) returned 1 [0114.890] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0114.890] GetObjectW (in: h=0x18a0048, c=92, pv=0x119de3c | out: pv=0x119de3c) returned 92 [0114.890] SelectObject (hdc=0xe010919, h=0xb20a08b8) returned 0x18a0048 [0114.890] DrawTextExW (in: hdc=0xe010919, lpchText="Bictoins", cchText=8, lprc=0x119df78, format=0x102410, lpdtp=0x30b8ce4 | out: lpchText="Bictoins", lprc=0x119df78) returned 13 [0114.890] GetTextAlign (hdc=0xe010919) returned 0x0 [0114.890] GetTextColor (hdc=0xe010919) returned 0x0 [0114.890] SetTextColor (hdc=0xe010919, color=0xf0f0f0) returned 0x0 [0114.890] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0xb20a08b8 [0114.890] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119dce8 | out: pv=0x119dce8) returned 92 [0114.890] GetBkMode (hdc=0xe010919) returned 2 [0114.890] SetBkMode (hdc=0xe010919, mode=1) returned 2 [0114.890] DrawTextExW (in: hdc=0xe010919, lpchText="Bictoins", cchText=8, lprc=0x119df1c, format=0x102010, lpdtp=0x30b8eac | out: lpchText="Bictoins", lprc=0x119df1c) returned 13 [0114.890] RestoreDC (hdc=0xe010919, nSavedDC=-1) returned 1 [0114.890] GdipReleaseDC (graphics=0x56086d8, hdc=0xe010919) returned 0x0 [0114.890] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=1, y1=6, x2=1, y2=59) returned 0x0 [0114.890] GdipDrawLineI (graphics=0x56086d8, pen=0x5608a48, x1=0, y1=6, x2=0, y2=58) returned 0x0 [0114.891] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=0, y1=59, x2=711, y2=59) returned 0x0 [0114.891] GdipDrawLineI (graphics=0x56086d8, pen=0x5608a48, x1=0, y1=58, x2=710, y2=58) returned 0x0 [0114.891] GdipDrawLineI (graphics=0x56086d8, pen=0x5608a48, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0114.891] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0114.891] GdipDrawLineI (graphics=0x56086d8, pen=0x5608a48, x1=52, y1=5, x2=709, y2=5) returned 0x0 [0114.891] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=52, y1=6, x2=710, y2=6) returned 0x0 [0114.892] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=710, y1=5, x2=710, y2=59) returned 0x0 [0114.892] GdipDrawLineI (graphics=0x56086d8, pen=0x5608a48, x1=709, y1=6, x2=709, y2=58) returned 0x0 [0114.892] GdipDeletePen (pen=0x56035a8) returned 0x0 [0114.892] GdipDeletePen (pen=0x5608a48) returned 0x0 [0114.892] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0114.892] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=0) returned 0x4b08085a [0114.892] SelectPalette (hdc=0xe010919, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.892] EndPaint (hWnd=0x102c6, lpPaint=0x119e10c) returned 1 [0114.892] BeginPaint (in: hWnd=0x102c8, lpPaint=0x119e0e0 | out: lpPaint=0x119e0e0) returned 0x470108fd [0114.892] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.892] CreateCompatibleDC (hdc=0x470108fd) returned 0x3801090d [0114.892] SelectObject (hdc=0x3801090d, h=0x610508cf) returned 0x185000f [0114.892] GdipCreateFromHDC (hdc=0x3801090d, graphics=0x119e0d8) returned 0x0 [0114.892] GdipTranslateWorldTransform (graphics=0x56086d8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0114.892] GdipSetClipRectI (graphics=0x56086d8, x=0, y=0, width=166, height=13, combineMode=0x0) returned 0x0 [0114.892] GdipCreateMatrix (matrix=0x119e140) returned 0x0 [0114.892] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608bd8) returned 0x0 [0114.892] GdipIsMatrixIdentity (matrix=0x5608bd8, result=0x119e158) returned 0x0 [0114.892] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626ee0 [0114.892] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x1626ee0) returned 0x0 [0114.892] LocalFree (hMem=0x1626ee0) returned 0x0 [0114.892] GdipDeleteMatrix (matrix=0x5608bd8) returned 0x0 [0114.892] GdipCreateRegion (region=0x119e140) returned 0x0 [0114.893] GdipGetClip (graphics=0x56086d8, region=0x56035a8) returned 0x0 [0114.893] GdipIsInfiniteRegion (region=0x56035a8, graphics=0x56086d8, result=0x119e14c) returned 0x0 [0114.893] GdipSaveGraphics (graphics=0x56086d8, state=0x119e178) returned 0x0 [0114.893] GetWindowTextLengthW (hWnd=0x102c8) returned 34 [0114.893] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0114.893] GetSystemMetrics (nIndex=42) returned 0 [0114.893] GetWindowTextW (in: hWnd=0x102c8, lpString=0x119e04c, nMaxCount=35 | out: lpString="Send 100$ to this bitcoins adress:") returned 34 [0114.893] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0xd, wParam=0x23, lParam=0x119e04c) returned 0x22 [0114.893] GetClientRect (in: hWnd=0x102c8, lpRect=0x119e140 | out: lpRect=0x119e140) returned 1 [0114.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.893] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119df6c, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8bytpâ\x19\x010\x8f\x0b\x03\x18", lpUsedDefaultChar=0x0) returned 17 [0114.893] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0114.893] GdipCreateRegion (region=0x119df7c) returned 0x0 [0114.893] GdipGetClip (graphics=0x56086d8, region=0x5608ad8) returned 0x0 [0114.893] GdipCreateMatrix (matrix=0x119df7c) returned 0x0 [0114.893] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608b68) returned 0x0 [0114.893] GdipIsMatrixIdentity (matrix=0x5608b68, result=0x119df94) returned 0x0 [0114.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626a48 [0114.893] GdipGetMatrixElements (matrix=0x5608b68, matrixOut=0x1626a48) returned 0x0 [0114.893] LocalFree (hMem=0x1626a48) returned 0x0 [0114.893] GdipCombineRegionRegion (region=0x5608ad8, region2=0x56035a8, combineMode=0x1) returned 0x0 [0114.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626dc8 [0114.893] GdipGetMatrixElements (matrix=0x5608b68, matrixOut=0x1626dc8) returned 0x0 [0114.893] LocalFree (hMem=0x1626dc8) returned 0x0 [0114.893] GdipDeleteMatrix (matrix=0x5608b68) returned 0x0 [0114.893] GdipIsInfiniteRegion (region=0x5608ad8, graphics=0x56086d8, result=0x119dfc0) returned 0x0 [0114.893] GdipIsInfiniteRegion (region=0x5608ad8, graphics=0x56086d8, result=0x119dfb0) returned 0x0 [0114.893] GdipGetRegionHRgn (region=0x5608ad8, graphics=0x56086d8, hRgn=0x119dfb0) returned 0x0 [0114.893] GdipDeleteRegion (region=0x5608ad8) returned 0x0 [0114.893] GdipGetDC (graphics=0x56086d8, hdc=0x119dfc8) returned 0x0 [0114.893] GetCurrentObject (hdc=0x3801090d, type=0x1) returned 0x1b00017 [0114.893] GetCurrentObject (hdc=0x3801090d, type=0x2) returned 0x1900010 [0114.893] GetCurrentObject (hdc=0x3801090d, type=0x7) returned 0x610508cf [0114.893] GetCurrentObject (hdc=0x3801090d, type=0x6) returned 0x18a0048 [0114.893] SaveDC (hdc=0x3801090d) returned 1 [0114.893] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x89040894 [0114.894] GetClipRgn (hdc=0x3801090d, hrgn=0x89040894) returned 0 [0114.894] SelectClipRgn (hdc=0x3801090d, hrgn=0x7c0408c1) returned 2 [0114.894] DeleteObject (ho=0x89040894) returned 1 [0114.894] DeleteObject (ho=0x7c0408c1) returned 1 [0114.894] OffsetViewportOrgEx (in: hdc=0x3801090d, x=0, y=0, lppt=0x30b92d4 | out: lppt=0x30b92d4) returned 1 [0114.894] OffsetViewportOrgEx (in: hdc=0x3801090d, x=-6, y=-14, lppt=0x30b92e4 | out: lppt=0x30b92e4) returned 1 [0114.894] GetClientRect (in: hWnd=0x102c6, lpRect=0x119dff4 | out: lpRect=0x119dff4) returned 1 [0114.894] GetCurrentObject (hdc=0x3801090d, type=0x1) returned 0x1b00017 [0114.894] GetCurrentObject (hdc=0x3801090d, type=0x2) returned 0x1900010 [0114.894] GetCurrentObject (hdc=0x3801090d, type=0x7) returned 0x610508cf [0114.894] GetCurrentObject (hdc=0x3801090d, type=0x6) returned 0x18a0048 [0114.894] SaveDC (hdc=0x3801090d) returned 2 [0114.894] GetNearestColor (hdc=0x3801090d, color=0x0) returned 0x0 [0114.894] CreateSolidBrush (color=0x0) returned 0x5110086a [0114.894] FillRect (hDC=0x3801090d, lprc=0x119de94, hbr=0x5110086a) returned 1 [0114.894] DeleteObject (ho=0x5110086a) returned 1 [0114.894] RestoreDC (hdc=0x3801090d, nSavedDC=-1) returned 1 [0114.894] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.894] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119def4, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8bytpâ\x19\x01ð\x92\x0b\x03\x18", lpUsedDefaultChar=0x0) returned 17 [0114.894] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0114.894] SelectPalette (hdc=0x3801090d, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.894] GdipCreateFromHDC (hdc=0x3801090d, graphics=0x119de18) returned 0x0 [0114.894] GdipSetPageUnit (graphics=0x56190d8, unit=0x2) returned 0x0 [0114.894] GdipCreateMatrix (matrix=0x119ddd8) returned 0x0 [0114.894] GdipGetWorldTransform (graphics=0x56190d8, matrix=0x5608bd8) returned 0x0 [0114.894] GdipIsMatrixIdentity (matrix=0x5608bd8, result=0x119ddf0) returned 0x0 [0114.894] GdipDeleteMatrix (matrix=0x5608bd8) returned 0x0 [0114.894] GdipCreateRegion (region=0x119ddd8) returned 0x0 [0114.895] GdipGetClip (graphics=0x56190d8, region=0x56033e8) returned 0x0 [0114.895] GdipIsInfiniteRegion (region=0x56033e8, graphics=0x56190d8, result=0x119dde4) returned 0x0 [0114.895] GdipDeleteRegion (region=0x56033e8) returned 0x0 [0114.895] GdipSaveGraphics (graphics=0x56190d8, state=0x119de10) returned 0x0 [0114.895] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119ddf4) returned 0x0 [0114.895] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119ddf4) returned 0x0 [0114.895] GdipCreateRegion (region=0x119dd94) returned 0x0 [0114.895] GdipGetClip (graphics=0x56190d8, region=0x5619038) returned 0x0 [0114.895] GdipCreateMatrix (matrix=0x119dd94) returned 0x0 [0114.895] GdipGetWorldTransform (graphics=0x56190d8, matrix=0x5608b48) returned 0x0 [0114.895] GdipIsMatrixIdentity (matrix=0x5608b48, result=0x119ddac) returned 0x0 [0114.895] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626f50 [0114.895] GdipGetMatrixElements (matrix=0x5608b48, matrixOut=0x1626f50) returned 0x0 [0114.895] LocalFree (hMem=0x1626f50) returned 0x0 [0114.895] GdipDeleteMatrix (matrix=0x5608b48) returned 0x0 [0114.895] GdipIsInfiniteRegion (region=0x5619038, graphics=0x56190d8, result=0x119ddd8) returned 0x0 [0114.895] GdipDeleteRegion (region=0x5619038) returned 0x0 [0114.895] GdipGetDC (graphics=0x56190d8, hdc=0x119dde0) returned 0x0 [0114.895] GetCurrentObject (hdc=0x3801090d, type=0x1) returned 0x1b00017 [0114.895] GetCurrentObject (hdc=0x3801090d, type=0x2) returned 0x1900010 [0114.896] GetCurrentObject (hdc=0x3801090d, type=0x7) returned 0x610508cf [0114.896] GetCurrentObject (hdc=0x3801090d, type=0x6) returned 0x18a0048 [0114.896] SaveDC (hdc=0x3801090d) returned 2 [0114.896] OffsetViewportOrgEx (in: hdc=0x3801090d, x=0, y=0, lppt=0x30b96f0 | out: lppt=0x30b96f0) returned 1 [0114.896] GetWindowTextLengthW (hWnd=0x102c6) returned 8 [0114.896] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0114.896] GetSystemMetrics (nIndex=42) returned 0 [0114.896] GetWindowTextW (in: hWnd=0x102c6, lpString=0x119dd5c, nMaxCount=9 | out: lpString="Bictoins") returned 8 [0114.896] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xd, wParam=0x9, lParam=0x119dd5c) returned 0x8 [0114.896] GetCurrentObject (hdc=0x3801090d, type=0x6) returned 0x18a0048 [0114.896] GetObjectW (in: h=0x18a0048, c=92, pv=0x119dcc0 | out: pv=0x119dcc0) returned 92 [0114.896] SelectObject (hdc=0x3801090d, h=0xb20a08b8) returned 0x18a0048 [0114.896] DrawTextExW (in: hdc=0x3801090d, lpchText="Bictoins", cchText=8, lprc=0x119ddfc, format=0x102410, lpdtp=0x30b9788 | out: lpchText="Bictoins", lprc=0x119ddfc) returned 13 [0114.897] GetWindowTextLengthW (hWnd=0x102c6) returned 8 [0114.897] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0114.897] GetSystemMetrics (nIndex=42) returned 0 [0114.897] GetWindowTextW (in: hWnd=0x102c6, lpString=0x119dd5c, nMaxCount=9 | out: lpString="Bictoins") returned 8 [0114.897] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xd, wParam=0x9, lParam=0x119dd5c) returned 0x8 [0114.897] GetTextAlign (hdc=0x3801090d) returned 0x0 [0114.897] GetTextColor (hdc=0x3801090d) returned 0x0 [0114.897] SetTextColor (hdc=0x3801090d, color=0xf0f0f0) returned 0x0 [0114.897] GetCurrentObject (hdc=0x3801090d, type=0x6) returned 0xb20a08b8 [0114.897] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119db6c | out: pv=0x119db6c) returned 92 [0114.897] GetBkMode (hdc=0x3801090d) returned 2 [0114.897] SetBkMode (hdc=0x3801090d, mode=1) returned 2 [0114.897] DrawTextExW (in: hdc=0x3801090d, lpchText="Bictoins", cchText=8, lprc=0x119dda0, format=0x102010, lpdtp=0x30b99d8 | out: lpchText="Bictoins", lprc=0x119dda0) returned 13 [0114.897] RestoreDC (hdc=0x3801090d, nSavedDC=-1) returned 1 [0114.897] GdipReleaseDC (graphics=0x56190d8, hdc=0x3801090d) returned 0x0 [0114.897] GdipDrawLineI (graphics=0x56190d8, pen=0x5608a48, x1=1, y1=6, x2=1, y2=59) returned 0x0 [0114.897] GdipDrawLineI (graphics=0x56190d8, pen=0x5618fa8, x1=0, y1=6, x2=0, y2=58) returned 0x0 [0114.897] GdipDrawLineI (graphics=0x56190d8, pen=0x5608a48, x1=0, y1=59, x2=711, y2=59) returned 0x0 [0114.897] GdipDrawLineI (graphics=0x56190d8, pen=0x5618fa8, x1=0, y1=58, x2=710, y2=58) returned 0x0 [0114.897] GdipDrawLineI (graphics=0x56190d8, pen=0x5618fa8, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0114.897] GdipDrawLineI (graphics=0x56190d8, pen=0x5608a48, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0114.897] GdipDrawLineI (graphics=0x56190d8, pen=0x5618fa8, x1=52, y1=5, x2=709, y2=5) returned 0x0 [0114.897] GdipDrawLineI (graphics=0x56190d8, pen=0x5608a48, x1=52, y1=6, x2=710, y2=6) returned 0x0 [0114.897] GdipDrawLineI (graphics=0x56190d8, pen=0x5608a48, x1=710, y1=5, x2=710, y2=59) returned 0x0 [0114.897] GdipDrawLineI (graphics=0x56190d8, pen=0x5618fa8, x1=709, y1=6, x2=709, y2=58) returned 0x0 [0114.897] GdipDeletePen (pen=0x5608a48) returned 0x0 [0114.897] GdipDeletePen (pen=0x5618fa8) returned 0x0 [0114.897] GdipDeleteGraphics (graphics=0x56190d8) returned 0x0 [0114.897] SelectPalette (hdc=0x3801090d, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.897] RestoreDC (hdc=0x3801090d, nSavedDC=-1) returned 1 [0114.897] GdipReleaseDC (graphics=0x56086d8, hdc=0x3801090d) returned 0x0 [0114.897] GdipRestoreGraphics (graphics=0x56086d8, state=0xfd680dbd) returned 0x0 [0114.897] GdipDeleteRegion (region=0x56035a8) returned 0x0 [0114.897] GetWindowTextLengthW (hWnd=0x102c8) returned 34 [0114.898] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0114.898] GetSystemMetrics (nIndex=42) returned 0 [0114.898] GetWindowTextW (in: hWnd=0x102c8, lpString=0x119e04c, nMaxCount=35 | out: lpString="Send 100$ to this bitcoins adress:") returned 34 [0114.898] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102c8, Msg=0xd, wParam=0x23, lParam=0x119e04c) returned 0x22 [0114.898] GdipGetDC (graphics=0x56086d8, hdc=0x119dffc) returned 0x0 [0114.898] GetCurrentObject (hdc=0x3801090d, type=0x1) returned 0x1b00017 [0114.898] GetCurrentObject (hdc=0x3801090d, type=0x2) returned 0x1900010 [0114.898] GetCurrentObject (hdc=0x3801090d, type=0x7) returned 0x610508cf [0114.898] GetCurrentObject (hdc=0x3801090d, type=0x6) returned 0x18a0048 [0114.898] SaveDC (hdc=0x3801090d) returned 1 [0114.898] GetNearestColor (hdc=0x3801090d, color=0xff) returned 0xff [0114.898] RestoreDC (hdc=0x3801090d, nSavedDC=-1) returned 1 [0114.898] GdipReleaseDC (graphics=0x56086d8, hdc=0x3801090d) returned 0x0 [0114.898] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.898] AdjustWindowRectEx (in: lpRect=0x119df20, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119df20) returned 1 [0114.898] GdipGetTextRenderingHint (graphics=0x56086d8, mode=0x119df9c) returned 0x0 [0114.898] GdipGetDC (graphics=0x56086d8, hdc=0x119df88) returned 0x0 [0114.898] GetCurrentObject (hdc=0x3801090d, type=0x1) returned 0x1b00017 [0114.898] GetCurrentObject (hdc=0x3801090d, type=0x2) returned 0x1900010 [0114.898] GetCurrentObject (hdc=0x3801090d, type=0x7) returned 0x610508cf [0114.898] GetCurrentObject (hdc=0x3801090d, type=0x6) returned 0x18a0048 [0114.898] SaveDC (hdc=0x3801090d) returned 1 [0114.898] GetTextAlign (hdc=0x3801090d) returned 0x0 [0114.898] GetTextColor (hdc=0x3801090d) returned 0x0 [0114.898] SetTextColor (hdc=0x3801090d, color=0xff) returned 0x0 [0114.898] GetCurrentObject (hdc=0x3801090d, type=0x6) returned 0x18a0048 [0114.898] GetObjectW (in: h=0x18a0048, c=92, pv=0x119dce8 | out: pv=0x119dce8) returned 92 [0114.898] SelectObject (hdc=0x3801090d, h=0xb20a08b8) returned 0x18a0048 [0114.898] GetBkMode (hdc=0x3801090d) returned 2 [0114.898] SetBkMode (hdc=0x3801090d, mode=1) returned 2 [0114.898] DrawTextExW (in: hdc=0x3801090d, lpchText="Send 100$ to this bitcoins adress:", cchText=34, lprc=0x119df1c, format=0x100000, lpdtp=0x30b9f24 | out: lpchText="Send 100$ to this bitcoins adress:", lprc=0x119df1c) returned 13 [0114.899] RestoreDC (hdc=0x3801090d, nSavedDC=-1) returned 1 [0114.899] GdipReleaseDC (graphics=0x56086d8, hdc=0x3801090d) returned 0x0 [0114.899] GdipGetDC (graphics=0x56086d8, hdc=0x119e138) returned 0x0 [0114.899] BitBlt (hdc=0x470108fd, x=0, y=0, cx=166, cy=13, hdcSrc=0x3801090d, x1=0, y1=0, rop=0xcc0020) returned 1 [0114.899] GdipReleaseDC (graphics=0x56086d8, hdc=0x3801090d) returned 0x0 [0114.899] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.899] SelectObject (hdc=0x3801090d, h=0x185000f) returned 0x610508cf [0114.899] DeleteDC (hdc=0x3801090d) returned 1 [0114.899] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0114.899] EndPaint (hWnd=0x102c8, lpPaint=0x119e0dc) returned 1 [0114.899] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102ca, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0114.899] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x138, wParam=0x50108bd, lParam=0x102ca) returned 0x1100074 [0114.899] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x138, wParam=0x50108bd, lParam=0x102ca) returned 0x1100074 [0114.899] BeginPaint (in: hWnd=0x102cc, lpPaint=0x119e110 | out: lpPaint=0x119e110) returned 0xe010919 [0114.899] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.899] GetWindowTextLengthW (hWnd=0x102cc) returned 4 [0114.899] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0114.899] GetSystemMetrics (nIndex=42) returned 0 [0114.899] GetWindowTextW (in: hWnd=0x102cc, lpString=0x119e0b8, nMaxCount=5 | out: lpString="Time") returned 4 [0114.899] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0xd, wParam=0x5, lParam=0x119e0b8) returned 0x4 [0114.899] GetClientRect (in: hWnd=0x102cc, lpRect=0x119e170 | out: lpRect=0x119e170) returned 1 [0114.899] GetCurrentObject (hdc=0xe010919, type=0x1) returned 0x1b00017 [0114.899] GetCurrentObject (hdc=0xe010919, type=0x2) returned 0x1900010 [0114.899] GetCurrentObject (hdc=0xe010919, type=0x7) returned 0xf0506d3 [0114.899] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0114.899] SaveDC (hdc=0xe010919) returned 1 [0114.900] GetNearestColor (hdc=0xe010919, color=0x0) returned 0x0 [0114.900] CreateSolidBrush (color=0x0) returned 0x5210086a [0114.900] FillRect (hDC=0xe010919, lprc=0x119e010, hbr=0x5210086a) returned 1 [0114.900] DeleteObject (ho=0x5210086a) returned 1 [0114.900] RestoreDC (hdc=0xe010919, nSavedDC=-1) returned 1 [0114.900] GetWindowTextLengthW (hWnd=0x102cc) returned 4 [0114.900] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0114.900] GetSystemMetrics (nIndex=42) returned 0 [0114.900] GetWindowTextW (in: hWnd=0x102cc, lpString=0x119e0b8, nMaxCount=5 | out: lpString="Time") returned 4 [0114.900] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102cc, Msg=0xd, wParam=0x5, lParam=0x119e0b8) returned 0x4 [0114.900] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x119e070, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96=qh\x89\x9c\x96È\x8byt â\x19\x01\\\x9f\x0b\x03\x18", lpUsedDefaultChar=0x0) returned 17 [0114.900] GetProcAddress (hModule=0x77280000, lpProcName="ImageList_WriteEx") returned 0x0 [0114.900] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=1) returned 0x4b08085a [0114.900] GdipCreateFromHDC (hdc=0xe010919, graphics=0x119df94) returned 0x0 [0114.900] GdipSetPageUnit (graphics=0x56086d8, unit=0x2) returned 0x0 [0114.900] GdipCreateMatrix (matrix=0x119df54) returned 0x0 [0114.900] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608b78) returned 0x0 [0114.900] GdipIsMatrixIdentity (matrix=0x5608b78, result=0x119df6c) returned 0x0 [0114.900] GdipDeleteMatrix (matrix=0x5608b78) returned 0x0 [0114.900] GdipCreateRegion (region=0x119df54) returned 0x0 [0114.900] GdipGetClip (graphics=0x56086d8, region=0x56035a8) returned 0x0 [0114.900] GdipIsInfiniteRegion (region=0x56035a8, graphics=0x56086d8, result=0x119df60) returned 0x0 [0114.900] GdipDeleteRegion (region=0x56035a8) returned 0x0 [0114.900] GdipSaveGraphics (graphics=0x56086d8, state=0x119df8c) returned 0x0 [0114.900] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0x119df70) returned 0x0 [0114.900] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119df70) returned 0x0 [0114.900] GdipCreateRegion (region=0x119df10) returned 0x0 [0114.900] GdipGetClip (graphics=0x56086d8, region=0x5619038) returned 0x0 [0114.901] GdipCreateMatrix (matrix=0x119df10) returned 0x0 [0114.901] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608bd8) returned 0x0 [0114.901] GdipIsMatrixIdentity (matrix=0x5608bd8, result=0x119df28) returned 0x0 [0114.901] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626968 [0114.901] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x1626968) returned 0x0 [0114.901] LocalFree (hMem=0x1626968) returned 0x0 [0114.901] GdipDeleteMatrix (matrix=0x5608bd8) returned 0x0 [0114.901] GdipIsInfiniteRegion (region=0x5619038, graphics=0x56086d8, result=0x119df54) returned 0x0 [0114.901] GdipDeleteRegion (region=0x5619038) returned 0x0 [0114.901] GdipGetDC (graphics=0x56086d8, hdc=0x119df5c) returned 0x0 [0114.901] GetCurrentObject (hdc=0xe010919, type=0x1) returned 0x1b00017 [0114.901] GetCurrentObject (hdc=0xe010919, type=0x2) returned 0x1900010 [0114.901] GetCurrentObject (hdc=0xe010919, type=0x7) returned 0xf0506d3 [0114.901] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0114.901] SaveDC (hdc=0xe010919) returned 1 [0114.901] OffsetViewportOrgEx (in: hdc=0xe010919, x=0, y=0, lppt=0x30ba498 | out: lppt=0x30ba498) returned 1 [0114.901] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0x18a0048 [0114.901] GetObjectW (in: h=0x18a0048, c=92, pv=0x119de3c | out: pv=0x119de3c) returned 92 [0114.901] SelectObject (hdc=0xe010919, h=0xb20a08b8) returned 0x18a0048 [0114.901] DrawTextExW (in: hdc=0xe010919, lpchText="Time", cchText=4, lprc=0x119df78, format=0x102410, lpdtp=0x30ba4a8 | out: lpchText="Time", lprc=0x119df78) returned 13 [0114.901] GetTextAlign (hdc=0xe010919) returned 0x0 [0114.901] GetTextColor (hdc=0xe010919) returned 0x0 [0114.901] SetTextColor (hdc=0xe010919, color=0xf0f0f0) returned 0x0 [0114.901] GetCurrentObject (hdc=0xe010919, type=0x6) returned 0xb20a08b8 [0114.901] GetObjectW (in: h=0xb20a08b8, c=92, pv=0x119dce8 | out: pv=0x119dce8) returned 92 [0114.901] GetBkMode (hdc=0xe010919) returned 2 [0114.901] SetBkMode (hdc=0xe010919, mode=1) returned 2 [0114.901] DrawTextExW (in: hdc=0xe010919, lpchText="Time", cchText=4, lprc=0x119df1c, format=0x102010, lpdtp=0x30ba670 | out: lpchText="Time", lprc=0x119df1c) returned 13 [0114.901] RestoreDC (hdc=0xe010919, nSavedDC=-1) returned 1 [0114.901] GdipReleaseDC (graphics=0x56086d8, hdc=0xe010919) returned 0x0 [0114.901] GdipDrawLineI (graphics=0x56086d8, pen=0x5618fa8, x1=1, y1=6, x2=1, y2=93) returned 0x0 [0114.902] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=0, y1=6, x2=0, y2=92) returned 0x0 [0114.902] GdipDrawLineI (graphics=0x56086d8, pen=0x5618fa8, x1=0, y1=93, x2=340, y2=93) returned 0x0 [0114.902] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=0, y1=92, x2=339, y2=92) returned 0x0 [0114.902] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0114.902] GdipDrawLineI (graphics=0x56086d8, pen=0x5618fa8, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0114.902] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=38, y1=5, x2=338, y2=5) returned 0x0 [0114.903] GdipDrawLineI (graphics=0x56086d8, pen=0x5618fa8, x1=38, y1=6, x2=339, y2=6) returned 0x0 [0114.903] GdipDrawLineI (graphics=0x56086d8, pen=0x5618fa8, x1=339, y1=5, x2=339, y2=93) returned 0x0 [0114.903] GdipDrawLineI (graphics=0x56086d8, pen=0x56035a8, x1=338, y1=6, x2=338, y2=92) returned 0x0 [0114.903] GdipDeletePen (pen=0x5618fa8) returned 0x0 [0114.903] GdipDeletePen (pen=0x56035a8) returned 0x0 [0114.903] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0114.903] SelectPalette (hdc=0xe010919, hPal=0x4b08085a, bForceBkgd=0) returned 0x4b08085a [0114.903] SelectPalette (hdc=0xe010919, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.903] EndPaint (hWnd=0x102cc, lpPaint=0x119e10c) returned 1 [0114.903] BeginPaint (in: hWnd=0x102ce, lpPaint=0x119e0e0 | out: lpPaint=0x119e0e0) returned 0x470108fd [0114.903] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.903] CreateCompatibleDC (hdc=0x470108fd) returned 0x3f01090d [0114.903] SelectObject (hdc=0x3f01090d, h=0x610508cf) returned 0x185000f [0114.903] GdipCreateFromHDC (hdc=0x3f01090d, graphics=0x119e0d8) returned 0x0 [0114.903] GdipTranslateWorldTransform (graphics=0x56086d8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0114.904] GdipSetClipRectI (graphics=0x56086d8, x=0, y=0, width=328, height=23, combineMode=0x0) returned 0x0 [0114.904] GdipCreateMatrix (matrix=0x119e140) returned 0x0 [0114.904] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5603670) returned 0x0 [0114.904] GdipIsMatrixIdentity (matrix=0x5603670, result=0x119e158) returned 0x0 [0114.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626c78 [0114.904] GdipGetMatrixElements (matrix=0x5603670, matrixOut=0x1626c78) returned 0x0 [0114.904] LocalFree (hMem=0x1626c78) returned 0x0 [0114.904] GdipDeleteMatrix (matrix=0x5603670) returned 0x0 [0114.904] GdipCreateRegion (region=0x119e140) returned 0x0 [0114.904] GdipGetClip (graphics=0x56086d8, region=0x5608a48) returned 0x0 [0114.904] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119e14c) returned 0x0 [0114.904] GdipSaveGraphics (graphics=0x56086d8, state=0x119e178) returned 0x0 [0114.904] GetWindowTextLengthW (hWnd=0x102ce) returned 37 [0114.904] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x25 [0114.904] GetSystemMetrics (nIndex=42) returned 0 [0114.904] GetWindowTextW (in: hWnd=0x102ce, lpString=0x119e048, nMaxCount=38 | out: lpString="Your files will deleted after 30 days") returned 37 [0114.904] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0xd, wParam=0x26, lParam=0x119e048) returned 0x25 [0114.904] GetClientRect (in: hWnd=0x102ce, lpRect=0x119e140 | out: lpRect=0x119e140) returned 1 [0114.904] GdipCreateRegion (region=0x119df90) returned 0x0 [0114.904] GdipGetClip (graphics=0x56086d8, region=0x5608ad8) returned 0x0 [0114.904] GdipCreateMatrix (matrix=0x119df90) returned 0x0 [0114.904] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608bd8) returned 0x0 [0114.904] GdipIsMatrixIdentity (matrix=0x5608bd8, result=0x119dfa8) returned 0x0 [0114.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x16268c0 [0114.904] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x16268c0) returned 0x0 [0114.904] LocalFree (hMem=0x16268c0) returned 0x0 [0114.904] GdipCombineRegionRegion (region=0x5608ad8, region2=0x5608a48, combineMode=0x1) returned 0x0 [0114.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626d58 [0114.904] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x1626d58) returned 0x0 [0114.904] LocalFree (hMem=0x1626d58) returned 0x0 [0114.904] GdipDeleteMatrix (matrix=0x5608bd8) returned 0x0 [0114.904] GdipIsInfiniteRegion (region=0x5608ad8, graphics=0x56086d8, result=0x119dfd4) returned 0x0 [0114.904] GdipIsInfiniteRegion (region=0x5608ad8, graphics=0x56086d8, result=0x119dfc4) returned 0x0 [0114.904] GdipGetRegionHRgn (region=0x5608ad8, graphics=0x56086d8, hRgn=0x119dfc4) returned 0x0 [0114.904] GdipDeleteRegion (region=0x5608ad8) returned 0x0 [0114.904] GdipGetDC (graphics=0x56086d8, hdc=0x119dfdc) returned 0x0 [0114.904] GetCurrentObject (hdc=0x3f01090d, type=0x1) returned 0x1b00017 [0114.904] GetCurrentObject (hdc=0x3f01090d, type=0x2) returned 0x1900010 [0114.905] GetCurrentObject (hdc=0x3f01090d, type=0x7) returned 0x610508cf [0114.905] GetCurrentObject (hdc=0x3f01090d, type=0x6) returned 0x18a0048 [0114.905] SaveDC (hdc=0x3f01090d) returned 1 [0114.905] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d0408c1 [0114.905] GetClipRgn (hdc=0x3f01090d, hrgn=0x7d0408c1) returned 0 [0114.905] SelectClipRgn (hdc=0x3f01090d, hrgn=0x8f040894) returned 2 [0114.905] DeleteObject (ho=0x7d0408c1) returned 1 [0114.905] DeleteObject (ho=0x8f040894) returned 1 [0114.905] OffsetViewportOrgEx (in: hdc=0x3f01090d, x=0, y=0, lppt=0x30baaa4 | out: lppt=0x30baaa4) returned 1 [0114.905] GetNearestColor (hdc=0x3f01090d, color=0x0) returned 0x0 [0114.905] CreateSolidBrush (color=0x0) returned 0x5310086a [0114.905] FillRect (hDC=0x3f01090d, lprc=0x119dfe0, hbr=0x5310086a) returned 1 [0114.905] DeleteObject (ho=0x5310086a) returned 1 [0114.905] RestoreDC (hdc=0x3f01090d, nSavedDC=-1) returned 1 [0114.905] GdipReleaseDC (graphics=0x56086d8, hdc=0x3f01090d) returned 0x0 [0114.905] GdipRestoreGraphics (graphics=0x56086d8, state=0xfd620dbd) returned 0x0 [0114.905] GdipDeleteRegion (region=0x5608a48) returned 0x0 [0114.905] GetWindowTextLengthW (hWnd=0x102ce) returned 37 [0114.905] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x25 [0114.905] GetSystemMetrics (nIndex=42) returned 0 [0114.905] GetWindowTextW (in: hWnd=0x102ce, lpString=0x119e048, nMaxCount=38 | out: lpString="Your files will deleted after 30 days") returned 37 [0114.905] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102ce, Msg=0xd, wParam=0x26, lParam=0x119e048) returned 0x25 [0114.905] GdipGetDC (graphics=0x56086d8, hdc=0x119dffc) returned 0x0 [0114.905] GetCurrentObject (hdc=0x3f01090d, type=0x1) returned 0x1b00017 [0114.905] GetCurrentObject (hdc=0x3f01090d, type=0x2) returned 0x1900010 [0114.905] GetCurrentObject (hdc=0x3f01090d, type=0x7) returned 0x610508cf [0114.905] GetCurrentObject (hdc=0x3f01090d, type=0x6) returned 0x18a0048 [0114.905] SaveDC (hdc=0x3f01090d) returned 1 [0114.905] GetNearestColor (hdc=0x3f01090d, color=0xf0f0f0) returned 0xf0f0f0 [0114.905] RestoreDC (hdc=0x3f01090d, nSavedDC=-1) returned 1 [0114.905] GdipReleaseDC (graphics=0x56086d8, hdc=0x3f01090d) returned 0x0 [0114.905] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x77280000 [0114.905] AdjustWindowRectEx (in: lpRect=0x119df20, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x119df20) returned 1 [0114.905] GdipGetTextRenderingHint (graphics=0x56086d8, mode=0x119df9c) returned 0x0 [0114.906] GdipGetDC (graphics=0x56086d8, hdc=0x119df88) returned 0x0 [0114.906] GetCurrentObject (hdc=0x3f01090d, type=0x1) returned 0x1b00017 [0114.906] GetCurrentObject (hdc=0x3f01090d, type=0x2) returned 0x1900010 [0114.906] GetCurrentObject (hdc=0x3f01090d, type=0x7) returned 0x610508cf [0114.906] GetCurrentObject (hdc=0x3f01090d, type=0x6) returned 0x18a0048 [0114.906] SaveDC (hdc=0x3f01090d) returned 1 [0114.906] GetTextAlign (hdc=0x3f01090d) returned 0x0 [0114.906] GetTextColor (hdc=0x3f01090d) returned 0x0 [0114.906] SetTextColor (hdc=0x3f01090d, color=0xf0f0f0) returned 0x0 [0114.906] GetCurrentObject (hdc=0x3f01090d, type=0x6) returned 0x18a0048 [0114.906] GetObjectW (in: h=0x18a0048, c=92, pv=0x119dce8 | out: pv=0x119dce8) returned 92 [0114.906] SelectObject (hdc=0x3f01090d, h=0xb20a08b8) returned 0x18a0048 [0114.906] GetBkMode (hdc=0x3f01090d) returned 2 [0114.906] SetBkMode (hdc=0x3f01090d, mode=1) returned 2 [0114.906] DrawTextExW (in: hdc=0x3f01090d, lpchText="Your files will deleted after 30 days", cchText=37, lprc=0x119df1c, format=0x100000, lpdtp=0x30bb078 | out: lpchText="Your files will deleted after 30 days", lprc=0x119df1c) returned 13 [0114.906] RestoreDC (hdc=0x3f01090d, nSavedDC=-1) returned 1 [0114.906] GdipReleaseDC (graphics=0x56086d8, hdc=0x3f01090d) returned 0x0 [0114.906] GdipGetDC (graphics=0x56086d8, hdc=0x119e138) returned 0x0 [0114.906] BitBlt (hdc=0x470108fd, x=0, y=0, cx=328, cy=23, hdcSrc=0x3f01090d, x1=0, y1=0, rop=0xcc0020) returned 1 [0114.906] GdipReleaseDC (graphics=0x56086d8, hdc=0x3f01090d) returned 0x0 [0114.906] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.906] SelectObject (hdc=0x3f01090d, h=0x185000f) returned 0x610508cf [0114.906] DeleteDC (hdc=0x3f01090d) returned 1 [0114.906] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0114.906] EndPaint (hWnd=0x102ce, lpPaint=0x119e0dc) returned 1 [0114.906] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d0, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0114.906] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0114.906] BeginPaint (in: hWnd=0x102d4, lpPaint=0x119e0d4 | out: lpPaint=0x119e0d4) returned 0x470108fd [0114.907] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0114.907] CreateCompatibleDC (hdc=0x470108fd) returned 0x4301090d [0114.907] GetObjectType (h=0x470108fd) returned 0x3 [0114.907] CreateCompatibleBitmap (hdc=0x470108fd, cx=1, cy=1) returned 0x5f05058a [0114.907] GetDIBits (in: hdc=0x470108fd, hbm=0x5f05058a, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119db64, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119db64) returned 1 [0114.907] GetDIBits (in: hdc=0x470108fd, hbm=0x5f05058a, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119db64, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119db64) returned 1 [0114.907] DeleteObject (ho=0x5f05058a) returned 1 [0114.907] CreateDIBSection (in: hdc=0x470108fd, lpbmi=0x119dbb4, usage=0x0, ppvBits=0x119e0a8, hSection=0x0, offset=0x0 | out: ppvBits=0x119e0a8) returned 0x49050903 [0114.907] SelectObject (hdc=0x4301090d, h=0x49050903) returned 0x185000f [0114.907] GdipCreateFromHDC (hdc=0x4301090d, graphics=0x119e08c) returned 0x0 [0114.907] GdipTranslateWorldTransform (graphics=0x56086d8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0114.907] GdipSetClipRectI (graphics=0x56086d8, x=0, y=0, width=711, height=36, combineMode=0x0) returned 0x0 [0114.907] GdipCreateMatrix (matrix=0x119e134) returned 0x0 [0114.907] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5603670) returned 0x0 [0114.907] GdipIsMatrixIdentity (matrix=0x5603670, result=0x119e14c) returned 0x0 [0114.907] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626b28 [0114.907] GdipGetMatrixElements (matrix=0x5603670, matrixOut=0x1626b28) returned 0x0 [0114.907] LocalFree (hMem=0x1626b28) returned 0x0 [0114.907] GdipDeleteMatrix (matrix=0x5603670) returned 0x0 [0114.907] GdipCreateRegion (region=0x119e134) returned 0x0 [0114.907] GdipGetClip (graphics=0x56086d8, region=0x5608a48) returned 0x0 [0114.907] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119e140) returned 0x0 [0114.907] GdipSaveGraphics (graphics=0x56086d8, state=0x119e16c) returned 0x0 [0114.907] GdipRestoreGraphics (graphics=0x56086d8, state=0xfd600dbd) returned 0x0 [0114.907] GdipDeleteRegion (region=0x5608a48) returned 0x0 [0114.907] GdipGetDC (graphics=0x56086d8, hdc=0x119debc) returned 0x0 [0114.907] GetCurrentObject (hdc=0x4301090d, type=0x1) returned 0x1b00017 [0114.907] GetCurrentObject (hdc=0x4301090d, type=0x2) returned 0x1900010 [0114.907] GetCurrentObject (hdc=0x4301090d, type=0x7) returned 0x49050903 [0114.907] GetCurrentObject (hdc=0x4301090d, type=0x6) returned 0x18a0048 [0114.907] SaveDC (hdc=0x4301090d) returned 1 [0114.908] GetNearestColor (hdc=0x4301090d, color=0xc0) returned 0xc0 [0114.908] GetNearestColor (hdc=0x4301090d, color=0x40) returned 0x40 [0114.908] GetNearestColor (hdc=0x4301090d, color=0x0) returned 0x0 [0114.908] GetNearestColor (hdc=0x4301090d, color=0x5656e5) returned 0x5656e5 [0114.908] GetNearestColor (hdc=0x4301090d, color=0x0) returned 0x0 [0114.908] GetNearestColor (hdc=0x4301090d, color=0x6060ff) returned 0x6060ff [0114.908] GetNearestColor (hdc=0x4301090d, color=0x5656e5) returned 0x5656e5 [0114.908] GetNearestColor (hdc=0x4301090d, color=0xe6) returned 0xe6 [0114.908] GetNearestColor (hdc=0x4301090d, color=0x0) returned 0x0 [0114.908] RestoreDC (hdc=0x4301090d, nSavedDC=-1) returned 1 [0114.908] GdipReleaseDC (graphics=0x56086d8, hdc=0x4301090d) returned 0x0 [0114.908] DrawTextExW (in: hdc=0x490108ba, lpchText="Decrypt", cchText=7, lprc=0x119dd60, format=0x102415, lpdtp=0x30bc66c | out: lpchText="Decrypt", lprc=0x119dd60) returned 13 [0114.908] GdipCreateRegion (region=0x119ddb4) returned 0x0 [0114.908] GdipGetClip (graphics=0x56086d8, region=0x5608a48) returned 0x0 [0114.908] GdipCreateMatrix (matrix=0x119ddb4) returned 0x0 [0114.908] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608bd8) returned 0x0 [0114.908] GdipIsMatrixIdentity (matrix=0x5608bd8, result=0x119ddcc) returned 0x0 [0114.908] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626a48 [0114.908] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x1626a48) returned 0x0 [0114.908] LocalFree (hMem=0x1626a48) returned 0x0 [0114.908] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626f50 [0114.908] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x1626f50) returned 0x0 [0114.908] LocalFree (hMem=0x1626f50) returned 0x0 [0114.908] GdipDeleteMatrix (matrix=0x5608bd8) returned 0x0 [0114.908] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ddf8) returned 0x0 [0114.908] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119dde8) returned 0x0 [0114.908] GdipGetRegionHRgn (region=0x5608a48, graphics=0x56086d8, hRgn=0x119dde8) returned 0x0 [0114.908] GdipDeleteRegion (region=0x5608a48) returned 0x0 [0114.908] GdipGetDC (graphics=0x56086d8, hdc=0x119de00) returned 0x0 [0114.908] GetCurrentObject (hdc=0x4301090d, type=0x1) returned 0x1b00017 [0114.908] GetCurrentObject (hdc=0x4301090d, type=0x2) returned 0x1900010 [0114.908] GetCurrentObject (hdc=0x4301090d, type=0x7) returned 0x49050903 [0114.908] GetCurrentObject (hdc=0x4301090d, type=0x6) returned 0x18a0048 [0114.908] SaveDC (hdc=0x4301090d) returned 1 [0114.908] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x90040894 [0114.908] GetClipRgn (hdc=0x4301090d, hrgn=0x90040894) returned 0 [0114.908] SelectClipRgn (hdc=0x4301090d, hrgn=0x800408c1) returned 2 [0114.908] DeleteObject (ho=0x90040894) returned 1 [0114.908] DeleteObject (ho=0x800408c1) returned 1 [0114.908] OffsetViewportOrgEx (in: hdc=0x4301090d, x=0, y=0, lppt=0x30bc864 | out: lppt=0x30bc864) returned 1 [0114.908] GetNearestColor (hdc=0x4301090d, color=0xc0) returned 0xc0 [0114.908] CreateSolidBrush (color=0xc0) returned 0x5410086a [0114.909] FillRect (hDC=0x4301090d, lprc=0x119de04, hbr=0x5410086a) returned 1 [0114.909] DeleteObject (ho=0x5410086a) returned 1 [0114.909] RestoreDC (hdc=0x4301090d, nSavedDC=-1) returned 1 [0114.909] GdipReleaseDC (graphics=0x56086d8, hdc=0x4301090d) returned 0x0 [0114.909] GdipGetTextRenderingHint (graphics=0x56086d8, mode=0x119de80) returned 0x0 [0114.909] GdipGetDC (graphics=0x56086d8, hdc=0x119de6c) returned 0x0 [0114.909] GetCurrentObject (hdc=0x4301090d, type=0x1) returned 0x1b00017 [0114.909] GetCurrentObject (hdc=0x4301090d, type=0x2) returned 0x1900010 [0114.909] GetCurrentObject (hdc=0x4301090d, type=0x7) returned 0x49050903 [0114.909] GetCurrentObject (hdc=0x4301090d, type=0x6) returned 0x18a0048 [0114.909] SaveDC (hdc=0x4301090d) returned 1 [0114.909] GetTextAlign (hdc=0x4301090d) returned 0x0 [0114.909] GetTextColor (hdc=0x4301090d) returned 0x0 [0114.909] GetCurrentObject (hdc=0x4301090d, type=0x6) returned 0x18a0048 [0114.909] GetObjectW (in: h=0x18a0048, c=92, pv=0x119dbcc | out: pv=0x119dbcc) returned 92 [0114.909] SelectObject (hdc=0x4301090d, h=0xb20a08b8) returned 0x18a0048 [0114.909] GetBkMode (hdc=0x4301090d) returned 2 [0114.909] SetBkMode (hdc=0x4301090d, mode=1) returned 2 [0114.909] DrawTextExW (in: hdc=0x4301090d, lpchText="Decrypt", cchText=7, lprc=0x119dcb0, format=0x102415, lpdtp=0x30bcac4 | out: lpchText="Decrypt", lprc=0x119dcb0) returned 13 [0114.909] DrawTextExW (in: hdc=0x4301090d, lpchText="Decrypt", cchText=7, lprc=0x119de00, format=0x102015, lpdtp=0x30bcac4 | out: lpchText="Decrypt", lprc=0x119de00) returned 13 [0114.909] RestoreDC (hdc=0x4301090d, nSavedDC=-1) returned 1 [0114.909] GdipReleaseDC (graphics=0x56086d8, hdc=0x4301090d) returned 0x0 [0114.909] GetFocus () returned 0x102d4 [0114.909] GetFocus () returned 0x102d4 [0114.909] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119df04) returned 0x0 [0114.910] GdipDrawRectangleI (graphics=0x56086d8, pen=0x56035a8, x=0, y=0, width=710, height=35) returned 0x0 [0114.910] GdipDeletePen (pen=0x56035a8) returned 0x0 [0114.910] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119dee4) returned 0x0 [0114.910] GdipDrawRectangleI (graphics=0x56086d8, pen=0x56035a8, x=1, y=1, width=708, height=33) returned 0x0 [0114.910] GdipDeletePen (pen=0x56035a8) returned 0x0 [0114.910] GdipGetDC (graphics=0x56086d8, hdc=0x119e12c) returned 0x0 [0114.910] BitBlt (hdc=0x470108fd, x=0, y=0, cx=711, cy=36, hdcSrc=0x4301090d, x1=0, y1=0, rop=0xcc0020) returned 1 [0114.910] GdipReleaseDC (graphics=0x56086d8, hdc=0x4301090d) returned 0x0 [0114.910] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0114.910] SelectObject (hdc=0x4301090d, h=0x185000f) returned 0x49050903 [0114.910] DeleteDC (hdc=0x4301090d) returned 1 [0114.910] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0114.910] DeleteObject (ho=0x49050903) returned 1 [0114.910] EndPaint (hWnd=0x102d4, lpPaint=0x119e0d0) returned 1 [0116.122] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x216, wParam=0x9, lParam=0x119e500) returned 0x0 [0116.123] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0116.123] GetCapture () returned 0x0 [0116.123] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x46, wParam=0x0, lParam=0x119e4f0) returned 0x0 [0116.123] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x232, wParam=0x0, lParam=0x0) returned 0x0 [0116.123] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.124] IsWindowUnicode (hWnd=0x30258) returned 1 [0116.124] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.124] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2000002) returned 0x0 [0116.124] TranslateMessage (lpMsg=0x119f22c) returned 0 [0116.124] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0116.124] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa0, wParam=0x2, lParam=0x790314) returned 0x0 [0116.124] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.124] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.124] WaitMessage () returned 1 [0116.130] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.130] IsWindowUnicode (hWnd=0x102d6) returned 1 [0116.130] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.130] TranslateMessage (lpMsg=0x119f22c) returned 0 [0116.130] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0116.130] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.130] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.130] WaitMessage () returned 1 [0116.240] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.240] IsWindowUnicode (hWnd=0x102d6) returned 1 [0116.240] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.240] TranslateMessage (lpMsg=0x119f22c) returned 0 [0116.241] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0116.241] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.241] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.241] WaitMessage () returned 1 [0116.349] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.349] IsWindowUnicode (hWnd=0x102d6) returned 1 [0116.349] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.350] TranslateMessage (lpMsg=0x119f22c) returned 0 [0116.350] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0116.350] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.350] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.350] WaitMessage () returned 1 [0116.459] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.459] IsWindowUnicode (hWnd=0x102d6) returned 1 [0116.459] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.459] TranslateMessage (lpMsg=0x119f22c) returned 0 [0116.459] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0116.459] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.460] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.460] WaitMessage () returned 1 [0116.568] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.568] IsWindowUnicode (hWnd=0x102d6) returned 1 [0116.568] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.568] TranslateMessage (lpMsg=0x119f22c) returned 0 [0116.568] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0116.569] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.569] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.569] WaitMessage () returned 1 [0116.686] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.686] IsWindowUnicode (hWnd=0x102d6) returned 1 [0116.686] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.686] TranslateMessage (lpMsg=0x119f22c) returned 0 [0116.686] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0116.687] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.687] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.687] WaitMessage () returned 1 [0116.787] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.787] IsWindowUnicode (hWnd=0x102d6) returned 1 [0116.787] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.787] TranslateMessage (lpMsg=0x119f22c) returned 0 [0116.787] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0116.788] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.788] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.788] WaitMessage () returned 1 [0116.896] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.896] IsWindowUnicode (hWnd=0x102d6) returned 1 [0116.896] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0116.896] TranslateMessage (lpMsg=0x119f22c) returned 0 [0116.896] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0116.896] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.896] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0116.896] WaitMessage () returned 1 [0117.005] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.005] IsWindowUnicode (hWnd=0x102d6) returned 1 [0117.005] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.005] TranslateMessage (lpMsg=0x119f22c) returned 0 [0117.005] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0117.005] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.006] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.006] WaitMessage () returned 1 [0117.115] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.115] IsWindowUnicode (hWnd=0x102d6) returned 1 [0117.115] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.115] TranslateMessage (lpMsg=0x119f22c) returned 0 [0117.115] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0117.116] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.116] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.116] WaitMessage () returned 1 [0117.245] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.245] IsWindowUnicode (hWnd=0x102d6) returned 1 [0117.245] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.245] TranslateMessage (lpMsg=0x119f22c) returned 0 [0117.245] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0117.246] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.246] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.246] WaitMessage () returned 1 [0117.364] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.365] IsWindowUnicode (hWnd=0x102d6) returned 1 [0117.365] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.365] TranslateMessage (lpMsg=0x119f22c) returned 0 [0117.365] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0117.365] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.365] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.365] WaitMessage () returned 1 [0117.474] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.475] IsWindowUnicode (hWnd=0x102d6) returned 1 [0117.475] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.475] TranslateMessage (lpMsg=0x119f22c) returned 0 [0117.475] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0117.475] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.475] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.475] WaitMessage () returned 1 [0117.584] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.584] IsWindowUnicode (hWnd=0x102d6) returned 1 [0117.584] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.584] TranslateMessage (lpMsg=0x119f22c) returned 0 [0117.584] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0117.584] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.584] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.584] WaitMessage () returned 1 [0117.706] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.706] IsWindowUnicode (hWnd=0x102d6) returned 1 [0117.706] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.706] TranslateMessage (lpMsg=0x119f22c) returned 0 [0117.706] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0117.707] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.707] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.707] WaitMessage () returned 1 [0117.802] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.802] IsWindowUnicode (hWnd=0x102d6) returned 1 [0117.802] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.802] TranslateMessage (lpMsg=0x119f22c) returned 0 [0117.802] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0117.802] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.802] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.802] WaitMessage () returned 1 [0117.912] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.912] IsWindowUnicode (hWnd=0x102d6) returned 1 [0117.912] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0117.912] TranslateMessage (lpMsg=0x119f22c) returned 0 [0117.912] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0117.913] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.913] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0117.913] WaitMessage () returned 1 [0118.021] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.021] IsWindowUnicode (hWnd=0x102d6) returned 1 [0118.022] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.022] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.022] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.022] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.022] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.022] WaitMessage () returned 1 [0118.130] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.130] IsWindowUnicode (hWnd=0x102d6) returned 1 [0118.130] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.130] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.130] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.130] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.130] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.130] WaitMessage () returned 1 [0118.239] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.239] IsWindowUnicode (hWnd=0x102d6) returned 1 [0118.239] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.239] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.239] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.240] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.240] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.240] WaitMessage () returned 1 [0118.349] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.349] IsWindowUnicode (hWnd=0x102d6) returned 1 [0118.349] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.349] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.349] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.349] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.349] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.349] WaitMessage () returned 1 [0118.458] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.458] IsWindowUnicode (hWnd=0x102d6) returned 1 [0118.458] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.458] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.458] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.458] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.458] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.458] WaitMessage () returned 1 [0118.568] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.568] IsWindowUnicode (hWnd=0x102d6) returned 1 [0118.568] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.568] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.569] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.569] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.569] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.569] WaitMessage () returned 1 [0118.677] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.678] IsWindowUnicode (hWnd=0x102d6) returned 1 [0118.678] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.678] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.678] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.678] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.678] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.678] WaitMessage () returned 1 [0118.787] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.787] IsWindowUnicode (hWnd=0x102d6) returned 1 [0118.787] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.787] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.787] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.788] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.788] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.788] WaitMessage () returned 1 [0118.850] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.850] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xef02e2) returned 0x1 [0118.850] IsWindowUnicode (hWnd=0x102c4) returned 1 [0118.850] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.850] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.850] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.850] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x2a2, wParam=0x0, lParam=0x0) returned 0x0 [0118.851] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.851] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xef02e2) returned 0x1 [0118.851] IsWindowUnicode (hWnd=0x102c4) returned 1 [0118.851] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.851] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xef02e2) returned 0x1 [0118.851] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x1 [0118.852] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0118.852] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0118.853] SetCursor (hCursor=0x10005) returned 0x10005 [0118.853] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.853] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.853] _TrackMouseEvent (in: lpEventTrack=0x30bfd34 | out: lpEventTrack=0x30bfd34) returned 1 [0118.853] SendMessageW (hWnd=0x102c4, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0118.853] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0118.853] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x200, wParam=0x0, lParam=0x4a00a3) returned 0x0 [0118.853] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0118.854] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0118.854] GetKeyState (nVirtKey=1) returned 0 [0118.854] GetKeyState (nVirtKey=2) returned 0 [0118.854] GetKeyState (nVirtKey=4) returned 0 [0118.854] GetKeyState (nVirtKey=5) returned 0 [0118.854] GetKeyState (nVirtKey=6) returned 0 [0118.854] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.854] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.854] WaitMessage () returned 1 [0118.898] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.898] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1fb0260) returned 0x1 [0118.898] IsWindowUnicode (hWnd=0x102d4) returned 1 [0118.898] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.898] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.898] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.899] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0118.899] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.899] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1fb0260) returned 0x1 [0118.899] IsWindowUnicode (hWnd=0x102d4) returned 1 [0118.899] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.899] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1fb0260) returned 0x1 [0118.899] SetCursor (hCursor=0x10003) returned 0x10005 [0118.900] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.900] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.900] _TrackMouseEvent (in: lpEventTrack=0x2ec3394 | out: lpEventTrack=0x2ec3394) returned 1 [0118.900] SendMessageW (hWnd=0x102d4, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0118.900] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0118.900] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0118.900] GetKeyState (nVirtKey=1) returned 0 [0118.901] GetKeyState (nVirtKey=2) returned 0 [0118.901] GetKeyState (nVirtKey=4) returned 0 [0118.901] GetKeyState (nVirtKey=5) returned 0 [0118.901] GetKeyState (nVirtKey=6) returned 0 [0118.901] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.901] IsWindowUnicode (hWnd=0x102d4) returned 1 [0118.901] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.901] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.901] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.901] BeginPaint (in: hWnd=0x102d4, lpPaint=0x119ed10 | out: lpPaint=0x119ed10) returned 0x470108fd [0118.901] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0118.902] CreateCompatibleDC (hdc=0x470108fd) returned 0x240108de [0118.902] GetObjectType (h=0x470108fd) returned 0x3 [0118.902] CreateCompatibleBitmap (hdc=0x470108fd, cx=1, cy=1) returned 0x10050931 [0118.902] GetDIBits (in: hdc=0x470108fd, hbm=0x10050931, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0118.902] GetDIBits (in: hdc=0x470108fd, hbm=0x10050931, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0118.903] DeleteObject (ho=0x10050931) returned 1 [0118.903] CreateDIBSection (in: hdc=0x470108fd, lpbmi=0x119e7f0, usage=0x0, ppvBits=0x119ece4, hSection=0x0, offset=0x0 | out: ppvBits=0x119ece4) returned 0x1d05092f [0118.903] SelectObject (hdc=0x240108de, h=0x1d05092f) returned 0x185000f [0118.903] GdipCreateFromHDC (hdc=0x240108de, graphics=0x119ecc8) returned 0x0 [0118.904] GdipTranslateWorldTransform (graphics=0x56086d8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0118.904] GdipSetClipRectI (graphics=0x56086d8, x=0, y=0, width=711, height=36, combineMode=0x0) returned 0x0 [0118.904] GdipCreateMatrix (matrix=0x119ed70) returned 0x0 [0118.904] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5603670) returned 0x0 [0118.904] GdipIsMatrixIdentity (matrix=0x5603670, result=0x119ed88) returned 0x0 [0118.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626f18 [0118.904] GdipGetMatrixElements (matrix=0x5603670, matrixOut=0x1626f18) returned 0x0 [0118.904] LocalFree (hMem=0x1626f18) returned 0x0 [0118.904] GdipDeleteMatrix (matrix=0x5603670) returned 0x0 [0118.905] GdipCreateRegion (region=0x119ed70) returned 0x0 [0118.905] GdipGetClip (graphics=0x56086d8, region=0x5608a48) returned 0x0 [0118.905] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ed7c) returned 0x0 [0118.905] GdipSaveGraphics (graphics=0x56086d8, state=0x119eda8) returned 0x0 [0118.905] GdipRestoreGraphics (graphics=0x56086d8, state=0xfd5e0dbd) returned 0x0 [0118.905] GdipDeleteRegion (region=0x5608a48) returned 0x0 [0118.905] GdipGetDC (graphics=0x56086d8, hdc=0x119eb54) returned 0x0 [0118.905] GetCurrentObject (hdc=0x240108de, type=0x1) returned 0x1b00017 [0118.905] GetCurrentObject (hdc=0x240108de, type=0x2) returned 0x1900010 [0118.906] GetCurrentObject (hdc=0x240108de, type=0x7) returned 0x1d05092f [0118.906] GetCurrentObject (hdc=0x240108de, type=0x6) returned 0x18a0048 [0118.906] SaveDC (hdc=0x240108de) returned 1 [0118.906] GetNearestColor (hdc=0x240108de, color=0xc0) returned 0xc0 [0118.906] GetNearestColor (hdc=0x240108de, color=0x40) returned 0x40 [0118.906] GetNearestColor (hdc=0x240108de, color=0x0) returned 0x0 [0118.906] GetNearestColor (hdc=0x240108de, color=0x5656e5) returned 0x5656e5 [0118.906] GetNearestColor (hdc=0x240108de, color=0x0) returned 0x0 [0118.906] GetNearestColor (hdc=0x240108de, color=0x6060ff) returned 0x6060ff [0118.907] GetNearestColor (hdc=0x240108de, color=0x5656e5) returned 0x5656e5 [0118.907] GetNearestColor (hdc=0x240108de, color=0xe6) returned 0xe6 [0118.907] GetNearestColor (hdc=0x240108de, color=0x0) returned 0x0 [0118.907] RestoreDC (hdc=0x240108de, nSavedDC=-1) returned 1 [0118.907] GdipReleaseDC (graphics=0x56086d8, hdc=0x240108de) returned 0x0 [0118.907] DrawTextExW (in: hdc=0x490108ba, lpchText="Decrypt", cchText=7, lprc=0x119e9f8, format=0x102415, lpdtp=0x30c1398 | out: lpchText="Decrypt", lprc=0x119e9f8) returned 13 [0118.907] GdipCreateRegion (region=0x119ea4c) returned 0x0 [0118.908] GdipGetClip (graphics=0x56086d8, region=0x5608a48) returned 0x0 [0118.908] GdipCreateMatrix (matrix=0x119ea4c) returned 0x0 [0118.908] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608bd8) returned 0x0 [0118.908] GdipIsMatrixIdentity (matrix=0x5608bd8, result=0x119ea64) returned 0x0 [0118.908] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626a48 [0118.908] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x1626a48) returned 0x0 [0118.908] LocalFree (hMem=0x1626a48) returned 0x0 [0118.908] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626d20 [0118.908] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x1626d20) returned 0x0 [0118.908] LocalFree (hMem=0x1626d20) returned 0x0 [0118.909] GdipDeleteMatrix (matrix=0x5608bd8) returned 0x0 [0118.909] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ea90) returned 0x0 [0118.909] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ea80) returned 0x0 [0118.909] GdipGetRegionHRgn (region=0x5608a48, graphics=0x56086d8, hRgn=0x119ea80) returned 0x0 [0118.909] GdipDeleteRegion (region=0x5608a48) returned 0x0 [0118.909] GdipGetDC (graphics=0x56086d8, hdc=0x119ea98) returned 0x0 [0118.909] GetCurrentObject (hdc=0x240108de, type=0x1) returned 0x1b00017 [0118.909] GetCurrentObject (hdc=0x240108de, type=0x2) returned 0x1900010 [0118.909] GetCurrentObject (hdc=0x240108de, type=0x7) returned 0x1d05092f [0118.910] GetCurrentObject (hdc=0x240108de, type=0x6) returned 0x18a0048 [0118.910] SaveDC (hdc=0x240108de) returned 1 [0118.910] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x810408c1 [0118.910] GetClipRgn (hdc=0x240108de, hrgn=0x810408c1) returned 0 [0118.910] SelectClipRgn (hdc=0x240108de, hrgn=0x94040894) returned 2 [0118.910] DeleteObject (ho=0x810408c1) returned 1 [0118.910] DeleteObject (ho=0x94040894) returned 1 [0118.910] OffsetViewportOrgEx (in: hdc=0x240108de, x=0, y=0, lppt=0x30c1590 | out: lppt=0x30c1590) returned 1 [0118.911] GetNearestColor (hdc=0x240108de, color=0xe6) returned 0xe6 [0118.911] CreateSolidBrush (color=0xe6) returned 0x5510086a [0118.912] FillRect (hDC=0x240108de, lprc=0x119ea9c, hbr=0x5510086a) returned 1 [0118.913] DeleteObject (ho=0x5510086a) returned 1 [0118.913] RestoreDC (hdc=0x240108de, nSavedDC=-1) returned 1 [0118.913] GdipReleaseDC (graphics=0x56086d8, hdc=0x240108de) returned 0x0 [0118.913] GdipGetTextRenderingHint (graphics=0x56086d8, mode=0x119eb18) returned 0x0 [0118.914] GdipGetDC (graphics=0x56086d8, hdc=0x119eb04) returned 0x0 [0118.914] GetCurrentObject (hdc=0x240108de, type=0x1) returned 0x1b00017 [0118.914] GetCurrentObject (hdc=0x240108de, type=0x2) returned 0x1900010 [0118.914] GetCurrentObject (hdc=0x240108de, type=0x7) returned 0x1d05092f [0118.914] GetCurrentObject (hdc=0x240108de, type=0x6) returned 0x18a0048 [0118.914] SaveDC (hdc=0x240108de) returned 1 [0118.914] GetTextAlign (hdc=0x240108de) returned 0x0 [0118.914] GetTextColor (hdc=0x240108de) returned 0x0 [0118.914] GetCurrentObject (hdc=0x240108de, type=0x6) returned 0x18a0048 [0118.915] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e864 | out: pv=0x119e864) returned 92 [0118.915] SelectObject (hdc=0x240108de, h=0xb20a08b8) returned 0x18a0048 [0118.915] GetBkMode (hdc=0x240108de) returned 2 [0118.915] SetBkMode (hdc=0x240108de, mode=1) returned 2 [0118.915] DrawTextExW (in: hdc=0x240108de, lpchText="Decrypt", cchText=7, lprc=0x119e948, format=0x102415, lpdtp=0x30c17f0 | out: lpchText="Decrypt", lprc=0x119e948) returned 13 [0118.916] DrawTextExW (in: hdc=0x240108de, lpchText="Decrypt", cchText=7, lprc=0x119ea98, format=0x102015, lpdtp=0x30c17f0 | out: lpchText="Decrypt", lprc=0x119ea98) returned 13 [0118.916] RestoreDC (hdc=0x240108de, nSavedDC=-1) returned 1 [0118.916] GdipReleaseDC (graphics=0x56086d8, hdc=0x240108de) returned 0x0 [0118.916] GetFocus () returned 0x102d4 [0118.916] GetFocus () returned 0x102d4 [0118.916] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb9c) returned 0x0 [0118.916] GdipDrawRectangleI (graphics=0x56086d8, pen=0x56035a8, x=0, y=0, width=710, height=35) returned 0x0 [0118.916] GdipDeletePen (pen=0x56035a8) returned 0x0 [0118.917] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb7c) returned 0x0 [0118.917] GdipDrawRectangleI (graphics=0x56086d8, pen=0x56035a8, x=1, y=1, width=708, height=33) returned 0x0 [0118.917] GdipDeletePen (pen=0x56035a8) returned 0x0 [0118.917] GdipGetDC (graphics=0x56086d8, hdc=0x119ed68) returned 0x0 [0118.917] BitBlt (hdc=0x470108fd, x=0, y=0, cx=711, cy=36, hdcSrc=0x240108de, x1=0, y1=0, rop=0xcc0020) returned 1 [0118.917] GdipReleaseDC (graphics=0x56086d8, hdc=0x240108de) returned 0x0 [0118.917] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0118.918] SelectObject (hdc=0x240108de, h=0x185000f) returned 0x1d05092f [0118.918] DeleteDC (hdc=0x240108de) returned 1 [0118.918] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0118.918] DeleteObject (ho=0x1d05092f) returned 1 [0118.919] EndPaint (hWnd=0x102d4, lpPaint=0x119ed0c) returned 1 [0118.919] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.920] IsWindowUnicode (hWnd=0x102d6) returned 1 [0118.920] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.920] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.920] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.920] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.920] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.920] WaitMessage () returned 1 [0118.931] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.931] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x2230259) returned 0x1 [0118.931] IsWindowUnicode (hWnd=0x102d2) returned 1 [0118.931] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.931] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.931] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.931] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0118.931] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0118.932] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.932] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x2230259) returned 0x1 [0118.932] IsWindowUnicode (hWnd=0x102d2) returned 1 [0118.932] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.932] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x2230259) returned 0x1 [0118.932] SetCursor (hCursor=0x10003) returned 0x10003 [0118.933] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.933] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.933] _TrackMouseEvent (in: lpEventTrack=0x30c1a00 | out: lpEventTrack=0x30c1a00) returned 1 [0118.933] SendMessageW (hWnd=0x102d2, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0118.933] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0118.933] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x200, wParam=0x0, lParam=0x17001b) returned 0x0 [0118.933] GetKeyState (nVirtKey=1) returned 0 [0118.933] GetKeyState (nVirtKey=2) returned 0 [0118.933] GetKeyState (nVirtKey=4) returned 0 [0118.933] GetKeyState (nVirtKey=5) returned 0 [0118.933] GetKeyState (nVirtKey=6) returned 0 [0118.934] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.934] IsWindowUnicode (hWnd=0x102d4) returned 1 [0118.934] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.934] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.934] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.934] BeginPaint (in: hWnd=0x102d4, lpPaint=0x119ed10 | out: lpPaint=0x119ed10) returned 0x470108fd [0118.934] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0118.934] CreateCompatibleDC (hdc=0x470108fd) returned 0x12010931 [0118.934] GetObjectType (h=0x470108fd) returned 0x3 [0118.935] CreateCompatibleBitmap (hdc=0x470108fd, cx=1, cy=1) returned 0x1e05092f [0118.935] GetDIBits (in: hdc=0x470108fd, hbm=0x1e05092f, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0118.935] GetDIBits (in: hdc=0x470108fd, hbm=0x1e05092f, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0118.935] DeleteObject (ho=0x1e05092f) returned 1 [0118.936] CreateDIBSection (in: hdc=0x470108fd, lpbmi=0x119e7f0, usage=0x0, ppvBits=0x119ece4, hSection=0x0, offset=0x0 | out: ppvBits=0x119ece4) returned 0x250508de [0118.936] SelectObject (hdc=0x12010931, h=0x250508de) returned 0x185000f [0118.936] GdipCreateFromHDC (hdc=0x12010931, graphics=0x119ecc8) returned 0x0 [0118.936] GdipTranslateWorldTransform (graphics=0x56086d8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0118.936] GdipSetClipRectI (graphics=0x56086d8, x=0, y=0, width=711, height=36, combineMode=0x0) returned 0x0 [0118.936] GdipCreateMatrix (matrix=0x119ed70) returned 0x0 [0118.937] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5603670) returned 0x0 [0118.937] GdipIsMatrixIdentity (matrix=0x5603670, result=0x119ed88) returned 0x0 [0118.937] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626b98 [0118.937] GdipGetMatrixElements (matrix=0x5603670, matrixOut=0x1626b98) returned 0x0 [0118.937] LocalFree (hMem=0x1626b98) returned 0x0 [0118.937] GdipDeleteMatrix (matrix=0x5603670) returned 0x0 [0118.937] GdipCreateRegion (region=0x119ed70) returned 0x0 [0118.937] GdipGetClip (graphics=0x56086d8, region=0x5608a48) returned 0x0 [0118.937] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ed7c) returned 0x0 [0118.938] GdipSaveGraphics (graphics=0x56086d8, state=0x119eda8) returned 0x0 [0118.938] GdipRestoreGraphics (graphics=0x56086d8, state=0xfd5c0dbd) returned 0x0 [0118.938] GdipDeleteRegion (region=0x5608a48) returned 0x0 [0118.938] GdipGetDC (graphics=0x56086d8, hdc=0x119eaf8) returned 0x0 [0118.938] GetCurrentObject (hdc=0x12010931, type=0x1) returned 0x1b00017 [0118.938] GetCurrentObject (hdc=0x12010931, type=0x2) returned 0x1900010 [0118.938] GetCurrentObject (hdc=0x12010931, type=0x7) returned 0x250508de [0118.938] GetCurrentObject (hdc=0x12010931, type=0x6) returned 0x18a0048 [0118.938] SaveDC (hdc=0x12010931) returned 1 [0118.939] GetNearestColor (hdc=0x12010931, color=0xc0) returned 0xc0 [0118.939] GetNearestColor (hdc=0x12010931, color=0x40) returned 0x40 [0118.939] GetNearestColor (hdc=0x12010931, color=0x0) returned 0x0 [0118.939] GetNearestColor (hdc=0x12010931, color=0x5656e5) returned 0x5656e5 [0118.939] GetNearestColor (hdc=0x12010931, color=0x0) returned 0x0 [0118.939] GetNearestColor (hdc=0x12010931, color=0x6060ff) returned 0x6060ff [0118.939] GetNearestColor (hdc=0x12010931, color=0x5656e5) returned 0x5656e5 [0118.939] GetNearestColor (hdc=0x12010931, color=0xe6) returned 0xe6 [0118.940] GetNearestColor (hdc=0x12010931, color=0x0) returned 0x0 [0118.940] RestoreDC (hdc=0x12010931, nSavedDC=-1) returned 1 [0118.940] GdipReleaseDC (graphics=0x56086d8, hdc=0x12010931) returned 0x0 [0118.940] DrawTextExW (in: hdc=0x490108ba, lpchText="Decrypt", cchText=7, lprc=0x119e99c, format=0x102415, lpdtp=0x30c2fec | out: lpchText="Decrypt", lprc=0x119e99c) returned 13 [0118.940] GdipCreateRegion (region=0x119e9f0) returned 0x0 [0118.940] GdipGetClip (graphics=0x56086d8, region=0x5608a48) returned 0x0 [0118.940] GdipCreateMatrix (matrix=0x119e9f0) returned 0x0 [0118.940] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608bd8) returned 0x0 [0118.940] GdipIsMatrixIdentity (matrix=0x5608bd8, result=0x119ea08) returned 0x0 [0118.940] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626b98 [0118.940] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x1626b98) returned 0x0 [0118.940] LocalFree (hMem=0x1626b98) returned 0x0 [0118.941] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626c78 [0118.941] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x1626c78) returned 0x0 [0118.941] LocalFree (hMem=0x1626c78) returned 0x0 [0118.941] GdipDeleteMatrix (matrix=0x5608bd8) returned 0x0 [0118.941] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ea34) returned 0x0 [0118.941] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ea24) returned 0x0 [0118.941] GdipGetRegionHRgn (region=0x5608a48, graphics=0x56086d8, hRgn=0x119ea24) returned 0x0 [0118.941] GdipDeleteRegion (region=0x5608a48) returned 0x0 [0118.941] GdipGetDC (graphics=0x56086d8, hdc=0x119ea3c) returned 0x0 [0118.941] GetCurrentObject (hdc=0x12010931, type=0x1) returned 0x1b00017 [0118.941] GetCurrentObject (hdc=0x12010931, type=0x2) returned 0x1900010 [0118.941] GetCurrentObject (hdc=0x12010931, type=0x7) returned 0x250508de [0118.941] GetCurrentObject (hdc=0x12010931, type=0x6) returned 0x18a0048 [0118.942] SaveDC (hdc=0x12010931) returned 1 [0118.942] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x95040894 [0118.942] GetClipRgn (hdc=0x12010931, hrgn=0x95040894) returned 0 [0118.942] SelectClipRgn (hdc=0x12010931, hrgn=0x850408c1) returned 2 [0118.942] DeleteObject (ho=0x95040894) returned 1 [0118.942] DeleteObject (ho=0x850408c1) returned 1 [0118.942] OffsetViewportOrgEx (in: hdc=0x12010931, x=0, y=0, lppt=0x30c31e4 | out: lppt=0x30c31e4) returned 1 [0118.942] GetNearestColor (hdc=0x12010931, color=0xc0) returned 0xc0 [0118.943] CreateSolidBrush (color=0xc0) returned 0x5610086a [0118.943] FillRect (hDC=0x12010931, lprc=0x119ea40, hbr=0x5610086a) returned 1 [0118.944] DeleteObject (ho=0x5610086a) returned 1 [0118.944] RestoreDC (hdc=0x12010931, nSavedDC=-1) returned 1 [0118.944] GdipReleaseDC (graphics=0x56086d8, hdc=0x12010931) returned 0x0 [0118.944] GdipGetTextRenderingHint (graphics=0x56086d8, mode=0x119eabc) returned 0x0 [0118.944] GdipGetDC (graphics=0x56086d8, hdc=0x119eaa8) returned 0x0 [0118.944] GetCurrentObject (hdc=0x12010931, type=0x1) returned 0x1b00017 [0118.944] GetCurrentObject (hdc=0x12010931, type=0x2) returned 0x1900010 [0118.944] GetCurrentObject (hdc=0x12010931, type=0x7) returned 0x250508de [0118.944] GetCurrentObject (hdc=0x12010931, type=0x6) returned 0x18a0048 [0118.944] SaveDC (hdc=0x12010931) returned 1 [0118.945] GetTextAlign (hdc=0x12010931) returned 0x0 [0118.945] GetTextColor (hdc=0x12010931) returned 0x0 [0118.945] GetCurrentObject (hdc=0x12010931, type=0x6) returned 0x18a0048 [0118.945] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e808 | out: pv=0x119e808) returned 92 [0118.945] SelectObject (hdc=0x12010931, h=0xb20a08b8) returned 0x18a0048 [0118.945] GetBkMode (hdc=0x12010931) returned 2 [0118.945] SetBkMode (hdc=0x12010931, mode=1) returned 2 [0118.945] DrawTextExW (in: hdc=0x12010931, lpchText="Decrypt", cchText=7, lprc=0x119e8ec, format=0x102415, lpdtp=0x30c3444 | out: lpchText="Decrypt", lprc=0x119e8ec) returned 13 [0118.945] DrawTextExW (in: hdc=0x12010931, lpchText="Decrypt", cchText=7, lprc=0x119ea3c, format=0x102015, lpdtp=0x30c3444 | out: lpchText="Decrypt", lprc=0x119ea3c) returned 13 [0118.945] RestoreDC (hdc=0x12010931, nSavedDC=-1) returned 1 [0118.945] GdipReleaseDC (graphics=0x56086d8, hdc=0x12010931) returned 0x0 [0118.945] GetFocus () returned 0x102d4 [0118.945] GetFocus () returned 0x102d4 [0118.945] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb40) returned 0x0 [0118.946] GdipDrawRectangleI (graphics=0x56086d8, pen=0x56035a8, x=0, y=0, width=710, height=35) returned 0x0 [0118.946] GdipDeletePen (pen=0x56035a8) returned 0x0 [0118.946] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb20) returned 0x0 [0118.946] GdipDrawRectangleI (graphics=0x56086d8, pen=0x56035a8, x=1, y=1, width=708, height=33) returned 0x0 [0118.946] GdipDeletePen (pen=0x56035a8) returned 0x0 [0118.946] GdipGetDC (graphics=0x56086d8, hdc=0x119ed68) returned 0x0 [0118.946] BitBlt (hdc=0x470108fd, x=0, y=0, cx=711, cy=36, hdcSrc=0x12010931, x1=0, y1=0, rop=0xcc0020) returned 1 [0118.946] GdipReleaseDC (graphics=0x56086d8, hdc=0x12010931) returned 0x0 [0118.946] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0118.946] SelectObject (hdc=0x12010931, h=0x185000f) returned 0x250508de [0118.946] DeleteDC (hdc=0x12010931) returned 1 [0118.946] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0118.946] DeleteObject (ho=0x250508de) returned 1 [0118.947] EndPaint (hWnd=0x102d4, lpPaint=0x119ed0c) returned 1 [0118.947] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.947] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.947] WaitMessage () returned 1 [0118.956] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.956] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x2300259) returned 0x1 [0118.956] IsWindowUnicode (hWnd=0x30258) returned 1 [0118.956] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.956] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.956] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.956] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0118.956] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.956] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x2300259) returned 0x1 [0118.956] IsWindowUnicode (hWnd=0x30258) returned 1 [0118.956] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.956] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x2300259) returned 0x1 [0118.956] SetCursor (hCursor=0x10003) returned 0x10003 [0118.956] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.956] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.957] _TrackMouseEvent (in: lpEventTrack=0x2ec22d8 | out: lpEventTrack=0x2ec22d8) returned 1 [0118.957] SendMessageW (hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0118.957] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0118.957] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x200, wParam=0x0, lParam=0x1ae002b) returned 0x0 [0118.957] GetKeyState (nVirtKey=1) returned 0 [0118.957] GetKeyState (nVirtKey=2) returned 0 [0118.957] GetKeyState (nVirtKey=4) returned 0 [0118.957] GetKeyState (nVirtKey=5) returned 0 [0118.957] GetKeyState (nVirtKey=6) returned 0 [0118.957] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.957] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.957] WaitMessage () returned 1 [0118.987] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.987] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x2340259) returned 0x1 [0118.987] IsWindowUnicode (hWnd=0x30258) returned 1 [0118.987] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0118.987] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x2340259) returned 0x1 [0118.987] SetCursor (hCursor=0x10003) returned 0x10003 [0118.988] TranslateMessage (lpMsg=0x119f22c) returned 0 [0118.988] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0118.988] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x200, wParam=0x0, lParam=0x1b2002b) returned 0x0 [0118.988] GetKeyState (nVirtKey=1) returned 0 [0118.988] GetKeyState (nVirtKey=2) returned 0 [0118.988] GetKeyState (nVirtKey=4) returned 0 [0118.988] GetKeyState (nVirtKey=5) returned 0 [0118.988] GetKeyState (nVirtKey=6) returned 0 [0118.988] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.988] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0118.988] WaitMessage () returned 1 [0119.005] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.005] IsWindowUnicode (hWnd=0x102d6) returned 1 [0119.005] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.005] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.005] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.005] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.005] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.005] WaitMessage () returned 1 [0119.083] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.083] IsWindowUnicode (hWnd=0x30258) returned 1 [0119.083] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.084] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.084] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.084] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.084] IsWindowUnicode (hWnd=0x30258) returned 1 [0119.084] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.084] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.084] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.084] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x2a1, wParam=0x0, lParam=0x1b2002b) returned 0x0 [0119.084] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.084] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.084] WaitMessage () returned 1 [0119.100] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.100] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x22a025b) returned 0x1 [0119.100] IsWindowUnicode (hWnd=0x102d2) returned 1 [0119.100] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.101] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.101] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.101] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0119.101] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.101] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x22a025b) returned 0x1 [0119.101] IsWindowUnicode (hWnd=0x102d2) returned 1 [0119.101] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.101] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x22a025b) returned 0x1 [0119.102] SetCursor (hCursor=0x10003) returned 0x10003 [0119.102] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.102] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.102] _TrackMouseEvent (in: lpEventTrack=0x30c1a00 | out: lpEventTrack=0x30c1a00) returned 1 [0119.102] SendMessageW (hWnd=0x102d2, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0119.102] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0119.102] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x200, wParam=0x0, lParam=0x1e001d) returned 0x0 [0119.102] GetKeyState (nVirtKey=1) returned 0 [0119.102] GetKeyState (nVirtKey=2) returned 0 [0119.102] GetKeyState (nVirtKey=4) returned 0 [0119.103] GetKeyState (nVirtKey=5) returned 0 [0119.103] GetKeyState (nVirtKey=6) returned 0 [0119.103] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.103] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.103] WaitMessage () returned 1 [0119.115] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.115] IsWindowUnicode (hWnd=0x102d6) returned 1 [0119.115] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.115] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.115] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.116] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.116] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.116] WaitMessage () returned 1 [0119.147] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.147] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x220025b) returned 0x1 [0119.148] IsWindowUnicode (hWnd=0x102d2) returned 1 [0119.148] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.148] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x220025b) returned 0x1 [0119.148] SetCursor (hCursor=0x10003) returned 0x10003 [0119.148] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.148] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.148] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x200, wParam=0x0, lParam=0x14001d) returned 0x0 [0119.148] GetKeyState (nVirtKey=1) returned 0 [0119.148] GetKeyState (nVirtKey=2) returned 0 [0119.148] GetKeyState (nVirtKey=4) returned 0 [0119.148] GetKeyState (nVirtKey=5) returned 0 [0119.148] GetKeyState (nVirtKey=6) returned 0 [0119.148] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.148] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.148] WaitMessage () returned 1 [0119.150] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.150] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x21e025b) returned 0x1 [0119.150] IsWindowUnicode (hWnd=0x102d2) returned 1 [0119.150] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.150] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x21e025b) returned 0x1 [0119.151] SetCursor (hCursor=0x10003) returned 0x10003 [0119.151] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.151] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.151] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x200, wParam=0x0, lParam=0x12001d) returned 0x0 [0119.151] GetKeyState (nVirtKey=1) returned 0 [0119.151] GetKeyState (nVirtKey=2) returned 0 [0119.151] GetKeyState (nVirtKey=4) returned 0 [0119.151] GetKeyState (nVirtKey=5) returned 0 [0119.151] GetKeyState (nVirtKey=6) returned 0 [0119.151] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.151] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.151] WaitMessage () returned 1 [0119.180] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.180] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x21b025b) returned 0x1 [0119.180] IsWindowUnicode (hWnd=0x102d2) returned 1 [0119.180] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.180] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x21b025b) returned 0x1 [0119.180] SetCursor (hCursor=0x10003) returned 0x10003 [0119.180] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.180] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.180] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x200, wParam=0x0, lParam=0xf001d) returned 0x0 [0119.180] GetKeyState (nVirtKey=1) returned 0 [0119.180] GetKeyState (nVirtKey=2) returned 0 [0119.181] GetKeyState (nVirtKey=4) returned 0 [0119.181] GetKeyState (nVirtKey=5) returned 0 [0119.181] GetKeyState (nVirtKey=6) returned 0 [0119.181] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.181] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.181] WaitMessage () returned 1 [0119.209] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.209] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x214025b) returned 0x1 [0119.209] IsWindowUnicode (hWnd=0x102d2) returned 1 [0119.209] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.209] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x214025b) returned 0x1 [0119.209] SetCursor (hCursor=0x10003) returned 0x10003 [0119.210] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.210] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.210] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x200, wParam=0x0, lParam=0x8001d) returned 0x0 [0119.210] GetKeyState (nVirtKey=1) returned 0 [0119.210] GetKeyState (nVirtKey=2) returned 0 [0119.210] GetKeyState (nVirtKey=4) returned 0 [0119.210] GetKeyState (nVirtKey=5) returned 0 [0119.210] GetKeyState (nVirtKey=6) returned 0 [0119.210] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.210] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.210] WaitMessage () returned 1 [0119.225] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.225] IsWindowUnicode (hWnd=0x102d6) returned 1 [0119.225] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.225] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.225] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.225] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.226] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.226] WaitMessage () returned 1 [0119.239] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.239] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x2120259) returned 0x1 [0119.240] IsWindowUnicode (hWnd=0x102d2) returned 1 [0119.240] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.240] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x84, wParam=0x0, lParam=0x2120259) returned 0x1 [0119.240] SetCursor (hCursor=0x10003) returned 0x10003 [0119.240] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.240] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.240] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x200, wParam=0x0, lParam=0x6001b) returned 0x0 [0119.240] GetKeyState (nVirtKey=1) returned 0 [0119.240] GetKeyState (nVirtKey=2) returned 0 [0119.241] GetKeyState (nVirtKey=4) returned 0 [0119.241] GetKeyState (nVirtKey=5) returned 0 [0119.241] GetKeyState (nVirtKey=6) returned 0 [0119.241] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.241] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.241] WaitMessage () returned 1 [0119.270] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.270] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f20258) returned 0x1 [0119.270] IsWindowUnicode (hWnd=0x102d4) returned 1 [0119.270] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.271] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.271] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.271] CallWindowProcW (lpPrevWndFunc=0x772824ee, hWnd=0x102d2, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0119.271] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.271] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f20258) returned 0x1 [0119.271] IsWindowUnicode (hWnd=0x102d4) returned 1 [0119.271] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.272] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x84, wParam=0x0, lParam=0x1f20258) returned 0x1 [0119.272] SetCursor (hCursor=0x10003) returned 0x10003 [0119.272] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.272] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.272] _TrackMouseEvent (in: lpEventTrack=0x2ec3394 | out: lpEventTrack=0x2ec3394) returned 1 [0119.272] SendMessageW (hWnd=0x102d4, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0119.272] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0119.272] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0119.273] GetKeyState (nVirtKey=1) returned 0 [0119.273] GetKeyState (nVirtKey=2) returned 0 [0119.273] GetKeyState (nVirtKey=4) returned 0 [0119.273] GetKeyState (nVirtKey=5) returned 0 [0119.273] GetKeyState (nVirtKey=6) returned 0 [0119.273] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.273] IsWindowUnicode (hWnd=0x102d4) returned 1 [0119.273] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.273] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.273] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.273] BeginPaint (in: hWnd=0x102d4, lpPaint=0x119ed10 | out: lpPaint=0x119ed10) returned 0x470108fd [0119.274] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0119.274] CreateCompatibleDC (hdc=0x470108fd) returned 0x2001092f [0119.274] GetObjectType (h=0x470108fd) returned 0x3 [0119.274] CreateCompatibleBitmap (hdc=0x470108fd, cx=1, cy=1) returned 0x260508de [0119.274] GetDIBits (in: hdc=0x470108fd, hbm=0x260508de, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0119.274] GetDIBits (in: hdc=0x470108fd, hbm=0x260508de, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0119.275] DeleteObject (ho=0x260508de) returned 1 [0119.275] CreateDIBSection (in: hdc=0x470108fd, lpbmi=0x119e7f0, usage=0x0, ppvBits=0x119ece4, hSection=0x0, offset=0x0 | out: ppvBits=0x119ece4) returned 0x13050931 [0119.275] SelectObject (hdc=0x2001092f, h=0x13050931) returned 0x185000f [0119.275] GdipCreateFromHDC (hdc=0x2001092f, graphics=0x119ecc8) returned 0x0 [0119.276] GdipTranslateWorldTransform (graphics=0x56086d8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0119.276] GdipSetClipRectI (graphics=0x56086d8, x=0, y=0, width=711, height=36, combineMode=0x0) returned 0x0 [0119.276] GdipCreateMatrix (matrix=0x119ed70) returned 0x0 [0119.276] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5603670) returned 0x0 [0119.276] GdipIsMatrixIdentity (matrix=0x5603670, result=0x119ed88) returned 0x0 [0119.276] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626dc8 [0119.276] GdipGetMatrixElements (matrix=0x5603670, matrixOut=0x1626dc8) returned 0x0 [0119.276] LocalFree (hMem=0x1626dc8) returned 0x0 [0119.277] GdipDeleteMatrix (matrix=0x5603670) returned 0x0 [0119.277] GdipCreateRegion (region=0x119ed70) returned 0x0 [0119.277] GdipGetClip (graphics=0x56086d8, region=0x5608a48) returned 0x0 [0119.277] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ed7c) returned 0x0 [0119.277] GdipSaveGraphics (graphics=0x56086d8, state=0x119eda8) returned 0x0 [0119.277] GdipRestoreGraphics (graphics=0x56086d8, state=0xfd5a0dbd) returned 0x0 [0119.277] GdipDeleteRegion (region=0x5608a48) returned 0x0 [0119.277] GdipGetDC (graphics=0x56086d8, hdc=0x119eb54) returned 0x0 [0119.277] GetCurrentObject (hdc=0x2001092f, type=0x1) returned 0x1b00017 [0119.278] GetCurrentObject (hdc=0x2001092f, type=0x2) returned 0x1900010 [0119.278] GetCurrentObject (hdc=0x2001092f, type=0x7) returned 0x13050931 [0119.278] GetCurrentObject (hdc=0x2001092f, type=0x6) returned 0x18a0048 [0119.278] SaveDC (hdc=0x2001092f) returned 1 [0119.278] GetNearestColor (hdc=0x2001092f, color=0xc0) returned 0xc0 [0119.278] GetNearestColor (hdc=0x2001092f, color=0x40) returned 0x40 [0119.278] GetNearestColor (hdc=0x2001092f, color=0x0) returned 0x0 [0119.278] GetNearestColor (hdc=0x2001092f, color=0x5656e5) returned 0x5656e5 [0119.278] GetNearestColor (hdc=0x2001092f, color=0x0) returned 0x0 [0119.279] GetNearestColor (hdc=0x2001092f, color=0x6060ff) returned 0x6060ff [0119.279] GetNearestColor (hdc=0x2001092f, color=0x5656e5) returned 0x5656e5 [0119.279] GetNearestColor (hdc=0x2001092f, color=0xe6) returned 0xe6 [0119.279] GetNearestColor (hdc=0x2001092f, color=0x0) returned 0x0 [0119.279] RestoreDC (hdc=0x2001092f, nSavedDC=-1) returned 1 [0119.279] GdipReleaseDC (graphics=0x56086d8, hdc=0x2001092f) returned 0x0 [0119.279] DrawTextExW (in: hdc=0x490108ba, lpchText="Decrypt", cchText=7, lprc=0x119e9f8, format=0x102415, lpdtp=0x30c5134 | out: lpchText="Decrypt", lprc=0x119e9f8) returned 13 [0119.280] GdipCreateRegion (region=0x119ea4c) returned 0x0 [0119.280] GdipGetClip (graphics=0x56086d8, region=0x5608a48) returned 0x0 [0119.280] GdipCreateMatrix (matrix=0x119ea4c) returned 0x0 [0119.280] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608bd8) returned 0x0 [0119.280] GdipIsMatrixIdentity (matrix=0x5608bd8, result=0x119ea64) returned 0x0 [0119.280] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626a80 [0119.280] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x1626a80) returned 0x0 [0119.280] LocalFree (hMem=0x1626a80) returned 0x0 [0119.280] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x16268f8 [0119.280] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x16268f8) returned 0x0 [0119.281] LocalFree (hMem=0x16268f8) returned 0x0 [0119.281] GdipDeleteMatrix (matrix=0x5608bd8) returned 0x0 [0119.281] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ea90) returned 0x0 [0119.281] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ea80) returned 0x0 [0119.281] GdipGetRegionHRgn (region=0x5608a48, graphics=0x56086d8, hRgn=0x119ea80) returned 0x0 [0119.281] GdipDeleteRegion (region=0x5608a48) returned 0x0 [0119.281] GdipGetDC (graphics=0x56086d8, hdc=0x119ea98) returned 0x0 [0119.281] GetCurrentObject (hdc=0x2001092f, type=0x1) returned 0x1b00017 [0119.281] GetCurrentObject (hdc=0x2001092f, type=0x2) returned 0x1900010 [0119.281] GetCurrentObject (hdc=0x2001092f, type=0x7) returned 0x13050931 [0119.281] GetCurrentObject (hdc=0x2001092f, type=0x6) returned 0x18a0048 [0119.282] SaveDC (hdc=0x2001092f) returned 1 [0119.282] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x860408c1 [0119.282] GetClipRgn (hdc=0x2001092f, hrgn=0x860408c1) returned 0 [0119.282] SelectClipRgn (hdc=0x2001092f, hrgn=0x99040894) returned 2 [0119.282] DeleteObject (ho=0x860408c1) returned 1 [0119.282] DeleteObject (ho=0x99040894) returned 1 [0119.282] OffsetViewportOrgEx (in: hdc=0x2001092f, x=0, y=0, lppt=0x30c532c | out: lppt=0x30c532c) returned 1 [0119.282] GetNearestColor (hdc=0x2001092f, color=0xe6) returned 0xe6 [0119.282] CreateSolidBrush (color=0xe6) returned 0x5710086a [0119.282] FillRect (hDC=0x2001092f, lprc=0x119ea9c, hbr=0x5710086a) returned 1 [0119.284] DeleteObject (ho=0x5710086a) returned 1 [0119.284] RestoreDC (hdc=0x2001092f, nSavedDC=-1) returned 1 [0119.284] GdipReleaseDC (graphics=0x56086d8, hdc=0x2001092f) returned 0x0 [0119.284] GdipGetTextRenderingHint (graphics=0x56086d8, mode=0x119eb18) returned 0x0 [0119.284] GdipGetDC (graphics=0x56086d8, hdc=0x119eb04) returned 0x0 [0119.284] GetCurrentObject (hdc=0x2001092f, type=0x1) returned 0x1b00017 [0119.285] GetCurrentObject (hdc=0x2001092f, type=0x2) returned 0x1900010 [0119.285] GetCurrentObject (hdc=0x2001092f, type=0x7) returned 0x13050931 [0119.285] GetCurrentObject (hdc=0x2001092f, type=0x6) returned 0x18a0048 [0119.285] SaveDC (hdc=0x2001092f) returned 1 [0119.285] GetTextAlign (hdc=0x2001092f) returned 0x0 [0119.285] GetTextColor (hdc=0x2001092f) returned 0x0 [0119.285] GetCurrentObject (hdc=0x2001092f, type=0x6) returned 0x18a0048 [0119.285] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e864 | out: pv=0x119e864) returned 92 [0119.285] SelectObject (hdc=0x2001092f, h=0xb20a08b8) returned 0x18a0048 [0119.286] GetBkMode (hdc=0x2001092f) returned 2 [0119.286] SetBkMode (hdc=0x2001092f, mode=1) returned 2 [0119.286] DrawTextExW (in: hdc=0x2001092f, lpchText="Decrypt", cchText=7, lprc=0x119e948, format=0x102415, lpdtp=0x30c558c | out: lpchText="Decrypt", lprc=0x119e948) returned 13 [0119.287] DrawTextExW (in: hdc=0x2001092f, lpchText="Decrypt", cchText=7, lprc=0x119ea98, format=0x102015, lpdtp=0x30c558c | out: lpchText="Decrypt", lprc=0x119ea98) returned 13 [0119.287] RestoreDC (hdc=0x2001092f, nSavedDC=-1) returned 1 [0119.287] GdipReleaseDC (graphics=0x56086d8, hdc=0x2001092f) returned 0x0 [0119.287] GetFocus () returned 0x102d4 [0119.287] GetFocus () returned 0x102d4 [0119.287] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb9c) returned 0x0 [0119.287] GdipDrawRectangleI (graphics=0x56086d8, pen=0x56035a8, x=0, y=0, width=710, height=35) returned 0x0 [0119.287] GdipDeletePen (pen=0x56035a8) returned 0x0 [0119.287] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb7c) returned 0x0 [0119.288] GdipDrawRectangleI (graphics=0x56086d8, pen=0x56035a8, x=1, y=1, width=708, height=33) returned 0x0 [0119.288] GdipDeletePen (pen=0x56035a8) returned 0x0 [0119.288] GdipGetDC (graphics=0x56086d8, hdc=0x119ed68) returned 0x0 [0119.288] BitBlt (hdc=0x470108fd, x=0, y=0, cx=711, cy=36, hdcSrc=0x2001092f, x1=0, y1=0, rop=0xcc0020) returned 1 [0119.288] GdipReleaseDC (graphics=0x56086d8, hdc=0x2001092f) returned 0x0 [0119.288] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0119.288] SelectObject (hdc=0x2001092f, h=0x185000f) returned 0x13050931 [0119.289] DeleteDC (hdc=0x2001092f) returned 1 [0119.289] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0119.289] DeleteObject (ho=0x13050931) returned 1 [0119.290] EndPaint (hWnd=0x102d4, lpPaint=0x119ed0c) returned 1 [0119.290] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.290] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.290] WaitMessage () returned 1 [0119.299] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.299] MapWindowPoints (in: hWndFrom=0x102b6, hWndTo=0x0, lpPoints=0x119eea0, cPoints=0x2 | out: lpPoints=0x119eea0) returned 28115522 [0119.300] IsWindowUnicode (hWnd=0x102b6) returned 1 [0119.300] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.300] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.300] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.300] CallWindowProcW (lpPrevWndFunc=0x7757b800, hWnd=0x102d4, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0119.300] InvalidateRect (hWnd=0x102d4, lpRect=0x0, bErase=0) returned 1 [0119.300] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.300] MapWindowPoints (in: hWndFrom=0x102b6, hWndTo=0x0, lpPoints=0x119eea0, cPoints=0x2 | out: lpPoints=0x119eea0) returned 28115522 [0119.300] IsWindowUnicode (hWnd=0x102b6) returned 1 [0119.300] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.301] MapWindowPoints (in: hWndFrom=0x102b6, hWndTo=0x0, lpPoints=0x119eeec, cPoints=0x2 | out: lpPoints=0x119eeec) returned 28115522 [0119.301] SetCursor (hCursor=0x10003) returned 0x10003 [0119.301] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.301] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.301] _TrackMouseEvent (in: lpEventTrack=0x30c5658 | out: lpEventTrack=0x30c5658) returned 1 [0119.301] SendMessageW (hWnd=0x102b6, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0119.301] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0119.301] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0x200, wParam=0x0, lParam=0x40019) returned 0x0 [0119.301] GetKeyState (nVirtKey=1) returned 0 [0119.301] GetKeyState (nVirtKey=2) returned 0 [0119.301] GetKeyState (nVirtKey=4) returned 0 [0119.301] GetKeyState (nVirtKey=5) returned 0 [0119.301] GetKeyState (nVirtKey=6) returned 0 [0119.301] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.302] IsWindowUnicode (hWnd=0x102d4) returned 1 [0119.302] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.302] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.302] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.302] BeginPaint (in: hWnd=0x102d4, lpPaint=0x119ed10 | out: lpPaint=0x119ed10) returned 0x470108fd [0119.302] SelectPalette (hdc=0x470108fd, hPal=0x4b08085a, bForceBkgd=1) returned 0x188000b [0119.302] CreateCompatibleDC (hdc=0x470108fd) returned 0x280108de [0119.302] GetObjectType (h=0x470108fd) returned 0x3 [0119.302] CreateCompatibleBitmap (hdc=0x470108fd, cx=1, cy=1) returned 0x14050931 [0119.302] GetDIBits (in: hdc=0x470108fd, hbm=0x14050931, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0119.302] GetDIBits (in: hdc=0x470108fd, hbm=0x14050931, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x119e7a0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x119e7a0) returned 1 [0119.302] DeleteObject (ho=0x14050931) returned 1 [0119.303] CreateDIBSection (in: hdc=0x470108fd, lpbmi=0x119e7f0, usage=0x0, ppvBits=0x119ece4, hSection=0x0, offset=0x0 | out: ppvBits=0x119ece4) returned 0x2105092f [0119.303] SelectObject (hdc=0x280108de, h=0x2105092f) returned 0x185000f [0119.303] GdipCreateFromHDC (hdc=0x280108de, graphics=0x119ecc8) returned 0x0 [0119.303] GdipTranslateWorldTransform (graphics=0x56086d8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0119.303] GdipSetClipRectI (graphics=0x56086d8, x=0, y=0, width=711, height=36, combineMode=0x0) returned 0x0 [0119.303] GdipCreateMatrix (matrix=0x119ed70) returned 0x0 [0119.303] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5603670) returned 0x0 [0119.303] GdipIsMatrixIdentity (matrix=0x5603670, result=0x119ed88) returned 0x0 [0119.303] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626a48 [0119.303] GdipGetMatrixElements (matrix=0x5603670, matrixOut=0x1626a48) returned 0x0 [0119.304] LocalFree (hMem=0x1626a48) returned 0x0 [0119.304] GdipDeleteMatrix (matrix=0x5603670) returned 0x0 [0119.304] GdipCreateRegion (region=0x119ed70) returned 0x0 [0119.304] GdipGetClip (graphics=0x56086d8, region=0x5608a48) returned 0x0 [0119.304] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ed7c) returned 0x0 [0119.304] GdipSaveGraphics (graphics=0x56086d8, state=0x119eda8) returned 0x0 [0119.304] GdipRestoreGraphics (graphics=0x56086d8, state=0xfd580dbd) returned 0x0 [0119.304] GdipDeleteRegion (region=0x5608a48) returned 0x0 [0119.304] GdipGetDC (graphics=0x56086d8, hdc=0x119eaf8) returned 0x0 [0119.304] GetCurrentObject (hdc=0x280108de, type=0x1) returned 0x1b00017 [0119.304] GetCurrentObject (hdc=0x280108de, type=0x2) returned 0x1900010 [0119.304] GetCurrentObject (hdc=0x280108de, type=0x7) returned 0x2105092f [0119.304] GetCurrentObject (hdc=0x280108de, type=0x6) returned 0x18a0048 [0119.304] SaveDC (hdc=0x280108de) returned 1 [0119.304] GetNearestColor (hdc=0x280108de, color=0xc0) returned 0xc0 [0119.305] GetNearestColor (hdc=0x280108de, color=0x40) returned 0x40 [0119.305] GetNearestColor (hdc=0x280108de, color=0x0) returned 0x0 [0119.305] GetNearestColor (hdc=0x280108de, color=0x5656e5) returned 0x5656e5 [0119.305] GetNearestColor (hdc=0x280108de, color=0x0) returned 0x0 [0119.305] GetNearestColor (hdc=0x280108de, color=0x6060ff) returned 0x6060ff [0119.305] GetNearestColor (hdc=0x280108de, color=0x5656e5) returned 0x5656e5 [0119.305] GetNearestColor (hdc=0x280108de, color=0xe6) returned 0xe6 [0119.305] GetNearestColor (hdc=0x280108de, color=0x0) returned 0x0 [0119.305] RestoreDC (hdc=0x280108de, nSavedDC=-1) returned 1 [0119.305] GdipReleaseDC (graphics=0x56086d8, hdc=0x280108de) returned 0x0 [0119.305] DrawTextExW (in: hdc=0x490108ba, lpchText="Decrypt", cchText=7, lprc=0x119e99c, format=0x102415, lpdtp=0x30c6c44 | out: lpchText="Decrypt", lprc=0x119e99c) returned 13 [0119.305] GdipCreateRegion (region=0x119e9f0) returned 0x0 [0119.305] GdipGetClip (graphics=0x56086d8, region=0x5608a48) returned 0x0 [0119.305] GdipCreateMatrix (matrix=0x119e9f0) returned 0x0 [0119.306] GdipGetWorldTransform (graphics=0x56086d8, matrix=0x5608bd8) returned 0x0 [0119.306] GdipIsMatrixIdentity (matrix=0x5608bd8, result=0x119ea08) returned 0x0 [0119.306] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626af0 [0119.306] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x1626af0) returned 0x0 [0119.306] LocalFree (hMem=0x1626af0) returned 0x0 [0119.306] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1626ee0 [0119.306] GdipGetMatrixElements (matrix=0x5608bd8, matrixOut=0x1626ee0) returned 0x0 [0119.306] LocalFree (hMem=0x1626ee0) returned 0x0 [0119.306] GdipDeleteMatrix (matrix=0x5608bd8) returned 0x0 [0119.306] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ea34) returned 0x0 [0119.306] GdipIsInfiniteRegion (region=0x5608a48, graphics=0x56086d8, result=0x119ea24) returned 0x0 [0119.306] GdipGetRegionHRgn (region=0x5608a48, graphics=0x56086d8, hRgn=0x119ea24) returned 0x0 [0119.306] GdipDeleteRegion (region=0x5608a48) returned 0x0 [0119.306] GdipGetDC (graphics=0x56086d8, hdc=0x119ea3c) returned 0x0 [0119.306] GetCurrentObject (hdc=0x280108de, type=0x1) returned 0x1b00017 [0119.307] GetCurrentObject (hdc=0x280108de, type=0x2) returned 0x1900010 [0119.307] GetCurrentObject (hdc=0x280108de, type=0x7) returned 0x2105092f [0119.307] GetCurrentObject (hdc=0x280108de, type=0x6) returned 0x18a0048 [0119.307] SaveDC (hdc=0x280108de) returned 1 [0119.307] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9a040894 [0119.307] GetClipRgn (hdc=0x280108de, hrgn=0x9a040894) returned 0 [0119.307] SelectClipRgn (hdc=0x280108de, hrgn=0x8a0408c1) returned 2 [0119.307] DeleteObject (ho=0x9a040894) returned 1 [0119.307] DeleteObject (ho=0x8a0408c1) returned 1 [0119.307] OffsetViewportOrgEx (in: hdc=0x280108de, x=0, y=0, lppt=0x30c6e3c | out: lppt=0x30c6e3c) returned 1 [0119.307] GetNearestColor (hdc=0x280108de, color=0xc0) returned 0xc0 [0119.307] CreateSolidBrush (color=0xc0) returned 0x5810086a [0119.307] FillRect (hDC=0x280108de, lprc=0x119ea40, hbr=0x5810086a) returned 1 [0119.308] DeleteObject (ho=0x5810086a) returned 1 [0119.308] RestoreDC (hdc=0x280108de, nSavedDC=-1) returned 1 [0119.308] GdipReleaseDC (graphics=0x56086d8, hdc=0x280108de) returned 0x0 [0119.308] GdipGetTextRenderingHint (graphics=0x56086d8, mode=0x119eabc) returned 0x0 [0119.308] GdipGetDC (graphics=0x56086d8, hdc=0x119eaa8) returned 0x0 [0119.309] GetCurrentObject (hdc=0x280108de, type=0x1) returned 0x1b00017 [0119.309] GetCurrentObject (hdc=0x280108de, type=0x2) returned 0x1900010 [0119.309] GetCurrentObject (hdc=0x280108de, type=0x7) returned 0x2105092f [0119.309] GetCurrentObject (hdc=0x280108de, type=0x6) returned 0x18a0048 [0119.309] SaveDC (hdc=0x280108de) returned 1 [0119.309] GetTextAlign (hdc=0x280108de) returned 0x0 [0119.309] GetTextColor (hdc=0x280108de) returned 0x0 [0119.309] GetCurrentObject (hdc=0x280108de, type=0x6) returned 0x18a0048 [0119.309] GetObjectW (in: h=0x18a0048, c=92, pv=0x119e808 | out: pv=0x119e808) returned 92 [0119.309] SelectObject (hdc=0x280108de, h=0xb20a08b8) returned 0x18a0048 [0119.309] GetBkMode (hdc=0x280108de) returned 2 [0119.309] SetBkMode (hdc=0x280108de, mode=1) returned 2 [0119.309] DrawTextExW (in: hdc=0x280108de, lpchText="Decrypt", cchText=7, lprc=0x119e8ec, format=0x102415, lpdtp=0x30c709c | out: lpchText="Decrypt", lprc=0x119e8ec) returned 13 [0119.310] DrawTextExW (in: hdc=0x280108de, lpchText="Decrypt", cchText=7, lprc=0x119ea3c, format=0x102015, lpdtp=0x30c709c | out: lpchText="Decrypt", lprc=0x119ea3c) returned 13 [0119.310] RestoreDC (hdc=0x280108de, nSavedDC=-1) returned 1 [0119.310] GdipReleaseDC (graphics=0x56086d8, hdc=0x280108de) returned 0x0 [0119.310] GetFocus () returned 0x102d4 [0119.310] GetFocus () returned 0x102d4 [0119.310] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb40) returned 0x0 [0119.310] GdipDrawRectangleI (graphics=0x56086d8, pen=0x56035a8, x=0, y=0, width=710, height=35) returned 0x0 [0119.310] GdipDeletePen (pen=0x56035a8) returned 0x0 [0119.310] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x119eb20) returned 0x0 [0119.310] GdipDrawRectangleI (graphics=0x56086d8, pen=0x56035a8, x=1, y=1, width=708, height=33) returned 0x0 [0119.310] GdipDeletePen (pen=0x56035a8) returned 0x0 [0119.310] GdipGetDC (graphics=0x56086d8, hdc=0x119ed68) returned 0x0 [0119.310] BitBlt (hdc=0x470108fd, x=0, y=0, cx=711, cy=36, hdcSrc=0x280108de, x1=0, y1=0, rop=0xcc0020) returned 1 [0119.311] GdipReleaseDC (graphics=0x56086d8, hdc=0x280108de) returned 0x0 [0119.311] SelectPalette (hdc=0x470108fd, hPal=0x188000b, bForceBkgd=0) returned 0x4b08085a [0119.311] SelectObject (hdc=0x280108de, h=0x185000f) returned 0x2105092f [0119.311] DeleteDC (hdc=0x280108de) returned 1 [0119.311] GdipDeleteGraphics (graphics=0x56086d8) returned 0x0 [0119.311] DeleteObject (ho=0x2105092f) returned 1 [0119.312] EndPaint (hWnd=0x102d4, lpPaint=0x119ed0c) returned 1 [0119.312] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.312] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.312] WaitMessage () returned 1 [0119.328] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.328] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0x114026f) returned 0x1 [0119.328] IsWindowUnicode (hWnd=0x102c4) returned 1 [0119.328] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.328] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.328] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.328] CallWindowProcW (lpPrevWndFunc=0x7757b8e0, hWnd=0x102b6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0119.328] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.328] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0x114026f) returned 0x1 [0119.328] IsWindowUnicode (hWnd=0x102c4) returned 1 [0119.328] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.328] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0x114026f) returned 0x1 [0119.328] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x1 [0119.328] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0119.328] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0119.329] SetCursor (hCursor=0x10005) returned 0x10005 [0119.329] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.329] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.329] _TrackMouseEvent (in: lpEventTrack=0x30bfd34 | out: lpEventTrack=0x30bfd34) returned 1 [0119.329] SendMessageW (hWnd=0x102c4, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0119.329] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0119.329] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x200, wParam=0x0, lParam=0x6f0030) returned 0x0 [0119.329] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0119.329] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0119.329] GetKeyState (nVirtKey=1) returned 0 [0119.329] GetKeyState (nVirtKey=2) returned 0 [0119.329] GetKeyState (nVirtKey=4) returned 0 [0119.329] GetKeyState (nVirtKey=5) returned 0 [0119.329] GetKeyState (nVirtKey=6) returned 0 [0119.329] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.329] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.329] WaitMessage () returned 1 [0119.333] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.333] IsWindowUnicode (hWnd=0x102d6) returned 1 [0119.333] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.333] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.333] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.333] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.333] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.333] WaitMessage () returned 1 [0119.358] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.358] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x900273) returned 0x1 [0119.358] IsWindowUnicode (hWnd=0x30258) returned 1 [0119.358] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.358] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.358] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.358] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0119.358] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.358] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x900273) returned 0x1 [0119.359] IsWindowUnicode (hWnd=0x30258) returned 1 [0119.359] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.359] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x900273) returned 0x1 [0119.359] SetCursor (hCursor=0x10003) returned 0x10005 [0119.359] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.359] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.359] _TrackMouseEvent (in: lpEventTrack=0x2ec22d8 | out: lpEventTrack=0x2ec22d8) returned 1 [0119.359] SendMessageW (hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0119.359] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0119.359] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x200, wParam=0x0, lParam=0xe0045) returned 0x0 [0119.359] GetKeyState (nVirtKey=1) returned 0 [0119.359] GetKeyState (nVirtKey=2) returned 0 [0119.359] GetKeyState (nVirtKey=4) returned 0 [0119.359] GetKeyState (nVirtKey=5) returned 0 [0119.359] GetKeyState (nVirtKey=6) returned 0 [0119.359] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.359] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.359] WaitMessage () returned 1 [0119.429] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.429] IsWindowUnicode (hWnd=0x30258) returned 1 [0119.429] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.429] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.429] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.429] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0119.429] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.429] IsWindowUnicode (hWnd=0x30258) returned 1 [0119.429] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.430] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2000002) returned 0x0 [0119.430] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.430] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.430] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa0, wParam=0x2, lParam=0x79026c) returned 0x0 [0119.430] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.430] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.430] WaitMessage () returned 1 [0119.442] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.442] IsWindowUnicode (hWnd=0x102d6) returned 1 [0119.442] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.442] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.442] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.442] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.442] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.442] WaitMessage () returned 1 [0119.449] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.449] IsWindowUnicode (hWnd=0x30258) returned 1 [0119.449] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.449] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2000002) returned 0x0 [0119.449] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.449] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.449] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa0, wParam=0x2, lParam=0x78026c) returned 0x0 [0119.449] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.449] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.449] WaitMessage () returned 1 [0119.552] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.552] IsWindowUnicode (hWnd=0x102d6) returned 1 [0119.552] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.553] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.553] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.553] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.553] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.553] WaitMessage () returned 1 [0119.557] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.558] IsWindowUnicode (hWnd=0x30258) returned 1 [0119.558] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.558] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2000002) returned 0x0 [0119.558] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.558] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.558] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa0, wParam=0x2, lParam=0x7d026b) returned 0x0 [0119.559] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.559] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.559] WaitMessage () returned 1 [0119.609] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.609] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x82026b) returned 0x1 [0119.610] IsWindowUnicode (hWnd=0x30258) returned 1 [0119.610] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.610] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.610] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.610] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x2a2, wParam=0x0, lParam=0x0) returned 0x0 [0119.610] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.610] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x82026b) returned 0x1 [0119.611] IsWindowUnicode (hWnd=0x30258) returned 1 [0119.611] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.611] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x82026b) returned 0x1 [0119.612] SetCursor (hCursor=0x10003) returned 0x10003 [0119.612] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.612] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.612] _TrackMouseEvent (in: lpEventTrack=0x2ec22d8 | out: lpEventTrack=0x2ec22d8) returned 1 [0119.612] SendMessageW (hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0119.613] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0119.613] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x200, wParam=0x0, lParam=0x3d) returned 0x0 [0119.613] GetKeyState (nVirtKey=1) returned 0 [0119.613] GetKeyState (nVirtKey=2) returned 0 [0119.613] GetKeyState (nVirtKey=4) returned 0 [0119.614] GetKeyState (nVirtKey=5) returned 0 [0119.614] GetKeyState (nVirtKey=6) returned 0 [0119.614] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.614] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.614] WaitMessage () returned 1 [0119.665] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.665] IsWindowUnicode (hWnd=0x102d6) returned 1 [0119.665] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.665] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.665] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.666] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.666] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.666] WaitMessage () returned 1 [0119.712] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.713] IsWindowUnicode (hWnd=0x30258) returned 1 [0119.713] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.713] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.713] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.713] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.713] IsWindowUnicode (hWnd=0x30258) returned 1 [0119.713] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.713] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.713] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.713] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x2a1, wParam=0x0, lParam=0x3d) returned 0x0 [0119.713] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.713] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.714] WaitMessage () returned 1 [0119.774] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.774] IsWindowUnicode (hWnd=0x102d6) returned 1 [0119.774] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.775] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.775] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.775] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.775] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.775] WaitMessage () returned 1 [0119.884] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.884] IsWindowUnicode (hWnd=0x102d6) returned 1 [0119.884] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.884] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.885] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.885] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.885] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.885] WaitMessage () returned 1 [0119.961] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.961] IsWindowUnicode (hWnd=0x30258) returned 1 [0119.961] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.962] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.962] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.962] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0119.962] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.962] IsWindowUnicode (hWnd=0x30258) returned 1 [0119.962] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.963] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2000002) returned 0x0 [0119.963] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.963] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.963] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa0, wParam=0x2, lParam=0x81026c) returned 0x0 [0119.963] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.963] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.963] WaitMessage () returned 1 [0119.993] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.993] IsWindowUnicode (hWnd=0x102d6) returned 1 [0119.993] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0119.994] TranslateMessage (lpMsg=0x119f22c) returned 0 [0119.994] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0119.994] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.994] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0119.994] WaitMessage () returned 1 [0120.012] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.012] IsWindowUnicode (hWnd=0x30258) returned 1 [0120.012] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.013] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2000002) returned 0x0 [0120.013] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.013] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.013] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa0, wParam=0x2, lParam=0x80026c) returned 0x0 [0120.013] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.013] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.013] WaitMessage () returned 1 [0120.103] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.103] IsWindowUnicode (hWnd=0x102d6) returned 1 [0120.103] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.103] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.103] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.103] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.103] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.103] WaitMessage () returned 1 [0120.214] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.214] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x84, wParam=0x0, lParam=0xa2026b) returned 0x1 [0120.214] IsWindowUnicode (hWnd=0x102c2) returned 1 [0120.214] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.214] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.214] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.214] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x2a2, wParam=0x0, lParam=0x0) returned 0x0 [0120.214] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.214] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x84, wParam=0x0, lParam=0xa2026b) returned 0x1 [0120.214] IsWindowUnicode (hWnd=0x102c2) returned 1 [0120.214] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.215] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x84, wParam=0x0, lParam=0xa2026b) returned 0x1 [0120.215] SetCursor (hCursor=0x10003) returned 0x10003 [0120.215] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.215] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.215] _TrackMouseEvent (in: lpEventTrack=0x30c7ddc | out: lpEventTrack=0x30c7ddc) returned 1 [0120.215] SendMessageW (hWnd=0x102c2, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0120.215] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0120.215] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x200, wParam=0x0, lParam=0xf0031) returned 0x0 [0120.215] GetKeyState (nVirtKey=1) returned 0 [0120.215] GetKeyState (nVirtKey=2) returned 0 [0120.215] GetKeyState (nVirtKey=4) returned 0 [0120.216] GetKeyState (nVirtKey=5) returned 0 [0120.216] GetKeyState (nVirtKey=6) returned 0 [0120.216] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.216] IsWindowUnicode (hWnd=0x102d6) returned 1 [0120.216] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.216] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.216] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.216] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.216] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.216] WaitMessage () returned 1 [0120.264] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.264] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x1680305) returned 0x1 [0120.264] IsWindowUnicode (hWnd=0x102c6) returned 1 [0120.264] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.265] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.265] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.265] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0120.265] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.265] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x1680305) returned 0x1 [0120.265] IsWindowUnicode (hWnd=0x102c6) returned 1 [0120.265] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.265] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x84, wParam=0x0, lParam=0x1680305) returned 0x1 [0120.265] SetCursor (hCursor=0x10003) returned 0x10003 [0120.265] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.265] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.265] _TrackMouseEvent (in: lpEventTrack=0x2ec32a4 | out: lpEventTrack=0x2ec32a4) returned 1 [0120.265] SendMessageW (hWnd=0x102c6, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0120.265] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0120.265] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x200, wParam=0x0, lParam=0xb00cb) returned 0x0 [0120.265] GetKeyState (nVirtKey=1) returned 0 [0120.265] GetKeyState (nVirtKey=2) returned 0 [0120.265] GetKeyState (nVirtKey=4) returned 0 [0120.266] GetKeyState (nVirtKey=5) returned 0 [0120.266] GetKeyState (nVirtKey=6) returned 0 [0120.266] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.266] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.266] WaitMessage () returned 1 [0120.295] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.295] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1b003ab) returned 0x1 [0120.295] IsWindowUnicode (hWnd=0x202a8) returned 1 [0120.295] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.295] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.295] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.295] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0120.295] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.296] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1b003ab) returned 0x1 [0120.296] IsWindowUnicode (hWnd=0x202a8) returned 1 [0120.296] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.296] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1b003ab) returned 0x1 [0120.296] SetCursor (hCursor=0x10003) returned 0x10003 [0120.296] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.296] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.296] _TrackMouseEvent (in: lpEventTrack=0x2ec32f0 | out: lpEventTrack=0x2ec32f0) returned 1 [0120.296] SendMessageW (hWnd=0x202a8, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0120.296] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0120.296] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x200, wParam=0x0, lParam=0x11016f) returned 0x0 [0120.296] GetKeyState (nVirtKey=1) returned 0 [0120.296] GetKeyState (nVirtKey=2) returned 0 [0120.296] GetKeyState (nVirtKey=4) returned 0 [0120.296] GetKeyState (nVirtKey=5) returned 0 [0120.296] GetKeyState (nVirtKey=6) returned 0 [0120.296] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.296] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.296] WaitMessage () returned 1 [0120.321] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.321] IsWindowUnicode (hWnd=0x102d6) returned 1 [0120.321] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.321] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.321] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.321] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.321] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.321] WaitMessage () returned 1 [0120.324] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.325] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1c3043f) returned 0x1 [0120.325] IsWindowUnicode (hWnd=0x102b8) returned 1 [0120.325] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.325] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.325] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.325] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0120.325] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.325] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1c3043f) returned 0x1 [0120.325] IsWindowUnicode (hWnd=0x102b8) returned 1 [0120.326] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.326] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1c3043f) returned 0x1 [0120.326] SetCursor (hCursor=0x10005) returned 0x10003 [0120.326] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.326] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0120.326] _TrackMouseEvent (in: lpEventTrack=0x2ec3308 | out: lpEventTrack=0x2ec3308) returned 1 [0120.326] SendMessageW (hWnd=0x102b8, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0120.327] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0120.327] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x200, wParam=0x0, lParam=0x201fb) returned 0x1 [0120.327] GetKeyState (nVirtKey=1) returned 0 [0120.327] GetKeyState (nVirtKey=2) returned 0 [0120.327] GetKeyState (nVirtKey=4) returned 0 [0120.327] GetKeyState (nVirtKey=5) returned 0 [0120.327] GetKeyState (nVirtKey=6) returned 0 [0120.327] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.327] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.327] WaitMessage () returned 1 [0120.356] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.357] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1c504ac) returned 0x1 [0120.357] IsWindowUnicode (hWnd=0x102b8) returned 1 [0120.357] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.357] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x84, wParam=0x0, lParam=0x1c504ac) returned 0x1 [0120.357] SetCursor (hCursor=0x10005) returned 0x10005 [0120.358] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.358] DispatchMessageW (lpMsg=0x119f22c) returned 0x1 [0120.358] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x200, wParam=0x0, lParam=0x40268) returned 0x1 [0120.358] GetKeyState (nVirtKey=1) returned 0 [0120.358] GetKeyState (nVirtKey=2) returned 0 [0120.358] GetKeyState (nVirtKey=4) returned 0 [0120.358] GetKeyState (nVirtKey=5) returned 0 [0120.358] GetKeyState (nVirtKey=6) returned 0 [0120.358] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.358] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.358] WaitMessage () returned 1 [0120.386] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.386] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x1ae0519) returned 0x1 [0120.387] IsWindowUnicode (hWnd=0x30258) returned 1 [0120.387] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.387] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.387] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.387] CallWindowProcW (lpPrevWndFunc=0x7757b880, hWnd=0x102b8, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0120.387] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.387] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x1ae0519) returned 0x1 [0120.388] IsWindowUnicode (hWnd=0x30258) returned 1 [0120.388] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.388] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x1ae0519) returned 0x1 [0120.388] SetCursor (hCursor=0x10003) returned 0x10005 [0120.388] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.388] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.388] _TrackMouseEvent (in: lpEventTrack=0x2ec22d8 | out: lpEventTrack=0x2ec22d8) returned 1 [0120.389] SendMessageW (hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0120.389] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0120.389] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x200, wParam=0x0, lParam=0x12c02eb) returned 0x0 [0120.389] GetKeyState (nVirtKey=1) returned 0 [0120.389] GetKeyState (nVirtKey=2) returned 0 [0120.389] GetKeyState (nVirtKey=4) returned 0 [0120.389] GetKeyState (nVirtKey=5) returned 0 [0120.389] GetKeyState (nVirtKey=6) returned 0 [0120.389] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.389] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.389] WaitMessage () returned 1 [0120.416] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.416] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.416] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.417] IsWindowUnicode (hWnd=0x30258) returned 1 [0120.417] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.417] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.417] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.417] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0120.417] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.417] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.417] WaitMessage () returned 1 [0120.431] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.431] IsWindowUnicode (hWnd=0x102d6) returned 1 [0120.431] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.431] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.431] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.431] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.431] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.431] WaitMessage () returned 1 [0120.539] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.539] IsWindowUnicode (hWnd=0x102d6) returned 1 [0120.539] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.539] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.540] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.540] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.540] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.540] WaitMessage () returned 1 [0120.649] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.649] IsWindowUnicode (hWnd=0x102d6) returned 1 [0120.649] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.649] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.649] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.649] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.649] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.649] WaitMessage () returned 1 [0120.758] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.758] IsWindowUnicode (hWnd=0x102d6) returned 1 [0120.759] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.759] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.759] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.759] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.759] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.759] WaitMessage () returned 1 [0120.868] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.868] IsWindowUnicode (hWnd=0x102d6) returned 1 [0120.868] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.868] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.869] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.869] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.869] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.869] WaitMessage () returned 1 [0120.977] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.977] IsWindowUnicode (hWnd=0x102d6) returned 1 [0120.978] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0120.978] TranslateMessage (lpMsg=0x119f22c) returned 0 [0120.978] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0120.978] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.978] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0120.978] WaitMessage () returned 1 [0121.087] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.087] IsWindowUnicode (hWnd=0x102d6) returned 1 [0121.087] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.087] TranslateMessage (lpMsg=0x119f22c) returned 0 [0121.087] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0121.088] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.088] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.088] WaitMessage () returned 1 [0121.196] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.196] IsWindowUnicode (hWnd=0x102d6) returned 1 [0121.196] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.196] TranslateMessage (lpMsg=0x119f22c) returned 0 [0121.197] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0121.197] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.197] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.197] WaitMessage () returned 1 [0121.306] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.306] IsWindowUnicode (hWnd=0x102d6) returned 1 [0121.306] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.306] TranslateMessage (lpMsg=0x119f22c) returned 0 [0121.306] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0121.306] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.306] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.306] WaitMessage () returned 1 [0121.414] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.414] IsWindowUnicode (hWnd=0x102d6) returned 1 [0121.414] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.414] TranslateMessage (lpMsg=0x119f22c) returned 0 [0121.414] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0121.414] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.414] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.414] WaitMessage () returned 1 [0121.524] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.525] IsWindowUnicode (hWnd=0x102d6) returned 1 [0121.525] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.525] TranslateMessage (lpMsg=0x119f22c) returned 0 [0121.525] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0121.525] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.525] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.525] WaitMessage () returned 1 [0121.634] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.634] IsWindowUnicode (hWnd=0x102d6) returned 1 [0121.634] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.634] TranslateMessage (lpMsg=0x119f22c) returned 0 [0121.634] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0121.634] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.634] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.634] WaitMessage () returned 1 [0121.743] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.743] IsWindowUnicode (hWnd=0x102d6) returned 1 [0121.743] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.743] TranslateMessage (lpMsg=0x119f22c) returned 0 [0121.744] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0121.744] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.744] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.744] WaitMessage () returned 1 [0121.853] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.853] IsWindowUnicode (hWnd=0x102d6) returned 1 [0121.853] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.853] TranslateMessage (lpMsg=0x119f22c) returned 0 [0121.853] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0121.853] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.853] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.853] WaitMessage () returned 1 [0121.961] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.961] IsWindowUnicode (hWnd=0x102d6) returned 1 [0121.961] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0121.961] TranslateMessage (lpMsg=0x119f22c) returned 0 [0121.961] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0121.962] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.962] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0121.962] WaitMessage () returned 1 [0122.071] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.071] IsWindowUnicode (hWnd=0x102d6) returned 1 [0122.071] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.072] TranslateMessage (lpMsg=0x119f22c) returned 0 [0122.072] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0122.072] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.072] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.072] WaitMessage () returned 1 [0122.180] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.180] IsWindowUnicode (hWnd=0x102d6) returned 1 [0122.180] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.180] TranslateMessage (lpMsg=0x119f22c) returned 0 [0122.180] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0122.181] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.181] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.181] WaitMessage () returned 1 [0122.289] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.289] IsWindowUnicode (hWnd=0x102d6) returned 1 [0122.289] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.289] TranslateMessage (lpMsg=0x119f22c) returned 0 [0122.289] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0122.289] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.289] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.289] WaitMessage () returned 1 [0122.399] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.400] IsWindowUnicode (hWnd=0x102d6) returned 1 [0122.400] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.400] TranslateMessage (lpMsg=0x119f22c) returned 0 [0122.400] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0122.400] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.400] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.400] WaitMessage () returned 1 [0122.509] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.509] IsWindowUnicode (hWnd=0x102d6) returned 1 [0122.509] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.509] TranslateMessage (lpMsg=0x119f22c) returned 0 [0122.509] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0122.509] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.509] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.509] WaitMessage () returned 1 [0122.618] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.618] IsWindowUnicode (hWnd=0x102d6) returned 1 [0122.618] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.618] TranslateMessage (lpMsg=0x119f22c) returned 0 [0122.618] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0122.619] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.619] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.619] WaitMessage () returned 1 [0122.727] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.727] IsWindowUnicode (hWnd=0x102d6) returned 1 [0122.727] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.727] TranslateMessage (lpMsg=0x119f22c) returned 0 [0122.727] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0122.727] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.727] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.727] WaitMessage () returned 1 [0122.837] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.837] IsWindowUnicode (hWnd=0x102d6) returned 1 [0122.837] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.837] TranslateMessage (lpMsg=0x119f22c) returned 0 [0122.837] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0122.837] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.838] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.838] WaitMessage () returned 1 [0122.964] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.964] IsWindowUnicode (hWnd=0x102d6) returned 1 [0122.965] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0122.965] TranslateMessage (lpMsg=0x119f22c) returned 0 [0122.965] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0122.965] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.965] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0122.965] WaitMessage () returned 1 [0123.056] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.056] IsWindowUnicode (hWnd=0x102d6) returned 1 [0123.056] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.056] TranslateMessage (lpMsg=0x119f22c) returned 0 [0123.056] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0123.056] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.056] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.056] WaitMessage () returned 1 [0123.164] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.164] IsWindowUnicode (hWnd=0x102d6) returned 1 [0123.164] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.164] TranslateMessage (lpMsg=0x119f22c) returned 0 [0123.164] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0123.164] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.164] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.164] WaitMessage () returned 1 [0123.274] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.274] IsWindowUnicode (hWnd=0x102d6) returned 1 [0123.274] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.274] TranslateMessage (lpMsg=0x119f22c) returned 0 [0123.274] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0123.274] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.274] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.274] WaitMessage () returned 1 [0123.383] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.383] IsWindowUnicode (hWnd=0x102d6) returned 1 [0123.383] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.383] TranslateMessage (lpMsg=0x119f22c) returned 0 [0123.383] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0123.383] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.383] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.383] WaitMessage () returned 1 [0123.493] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.493] IsWindowUnicode (hWnd=0x102d6) returned 1 [0123.493] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.493] TranslateMessage (lpMsg=0x119f22c) returned 0 [0123.493] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0123.494] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.494] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.494] WaitMessage () returned 1 [0123.603] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.603] IsWindowUnicode (hWnd=0x102d6) returned 1 [0123.603] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.603] TranslateMessage (lpMsg=0x119f22c) returned 0 [0123.603] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0123.603] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.603] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.603] WaitMessage () returned 1 [0123.711] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.711] IsWindowUnicode (hWnd=0x102d6) returned 1 [0123.711] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.711] TranslateMessage (lpMsg=0x119f22c) returned 0 [0123.711] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0123.711] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.711] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.711] WaitMessage () returned 1 [0123.821] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.821] IsWindowUnicode (hWnd=0x102d6) returned 1 [0123.821] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.822] TranslateMessage (lpMsg=0x119f22c) returned 0 [0123.822] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0123.822] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.822] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.822] WaitMessage () returned 1 [0123.932] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.932] IsWindowUnicode (hWnd=0x102d6) returned 1 [0123.932] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0123.932] TranslateMessage (lpMsg=0x119f22c) returned 0 [0123.932] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0123.932] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.932] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0123.932] WaitMessage () returned 1 [0124.040] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.040] IsWindowUnicode (hWnd=0x102d6) returned 1 [0124.040] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.040] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.040] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.041] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.041] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.041] WaitMessage () returned 1 [0124.149] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.149] IsWindowUnicode (hWnd=0x102d6) returned 1 [0124.150] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.150] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.150] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.150] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.150] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.150] WaitMessage () returned 1 [0124.263] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.263] IsWindowUnicode (hWnd=0x102d6) returned 1 [0124.263] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.263] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.263] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.263] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.263] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.263] WaitMessage () returned 1 [0124.368] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.368] IsWindowUnicode (hWnd=0x102d6) returned 1 [0124.368] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.368] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.368] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.369] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.369] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.369] WaitMessage () returned 1 [0124.477] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.477] IsWindowUnicode (hWnd=0x102d6) returned 1 [0124.477] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.477] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.477] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.477] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.477] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.477] WaitMessage () returned 1 [0124.586] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.586] IsWindowUnicode (hWnd=0x102d6) returned 1 [0124.586] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.586] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.586] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.586] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.586] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.586] WaitMessage () returned 1 [0124.708] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.708] IsWindowUnicode (hWnd=0x102d6) returned 1 [0124.708] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.708] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.709] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.709] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.709] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.709] WaitMessage () returned 1 [0124.743] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.743] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1bc0340) returned 0x1 [0124.743] IsWindowUnicode (hWnd=0x202a8) returned 1 [0124.744] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.744] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x84, wParam=0x0, lParam=0x1bc0340) returned 0x1 [0124.744] SetCursor (hCursor=0x10003) returned 0x10003 [0124.744] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.744] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.744] _TrackMouseEvent (in: lpEventTrack=0x2ec32f0 | out: lpEventTrack=0x2ec32f0) returned 1 [0124.745] SendMessageW (hWnd=0x202a8, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0124.745] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0124.745] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x200, wParam=0x0, lParam=0x1d0104) returned 0x0 [0124.745] GetKeyState (nVirtKey=1) returned 0 [0124.745] GetKeyState (nVirtKey=2) returned 0 [0124.745] GetKeyState (nVirtKey=4) returned 0 [0124.745] GetKeyState (nVirtKey=5) returned 0 [0124.745] GetKeyState (nVirtKey=6) returned 0 [0124.745] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.745] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.745] WaitMessage () returned 1 [0124.766] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.767] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xf8032f) returned 0x1 [0124.767] IsWindowUnicode (hWnd=0x102c4) returned 1 [0124.767] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.767] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.767] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.767] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x202a8, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0124.767] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.767] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xf8032f) returned 0x1 [0124.768] IsWindowUnicode (hWnd=0x102c4) returned 1 [0124.768] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.768] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xf8032f) returned 0x1 [0124.768] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x1 [0124.768] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.768] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.769] SetCursor (hCursor=0x10005) returned 0x10005 [0124.769] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.770] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.770] _TrackMouseEvent (in: lpEventTrack=0x30bfd34 | out: lpEventTrack=0x30bfd34) returned 1 [0124.770] SendMessageW (hWnd=0x102c4, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0124.770] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0124.770] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x200, wParam=0x0, lParam=0x5300f0) returned 0x0 [0124.770] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.770] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.770] GetKeyState (nVirtKey=1) returned 0 [0124.770] GetKeyState (nVirtKey=2) returned 0 [0124.770] GetKeyState (nVirtKey=4) returned 0 [0124.771] GetKeyState (nVirtKey=5) returned 0 [0124.771] GetKeyState (nVirtKey=6) returned 0 [0124.771] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.771] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.771] WaitMessage () returned 1 [0124.799] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.799] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xdc032d) returned 0x1 [0124.800] IsWindowUnicode (hWnd=0x102c4) returned 1 [0124.800] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.800] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xdc032d) returned 0x1 [0124.800] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x1 [0124.800] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.800] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.801] SetCursor (hCursor=0x10005) returned 0x10005 [0124.801] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.801] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.801] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x200, wParam=0x0, lParam=0x3700ee) returned 0x0 [0124.801] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.801] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.802] GetKeyState (nVirtKey=1) returned 0 [0124.802] GetKeyState (nVirtKey=2) returned 0 [0124.802] GetKeyState (nVirtKey=4) returned 0 [0124.802] GetKeyState (nVirtKey=5) returned 0 [0124.802] GetKeyState (nVirtKey=6) returned 0 [0124.802] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.802] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.802] WaitMessage () returned 1 [0124.805] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.805] IsWindowUnicode (hWnd=0x102d6) returned 1 [0124.805] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.805] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.805] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.806] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.806] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.806] WaitMessage () returned 1 [0124.826] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.826] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xca0328) returned 0x1 [0124.826] IsWindowUnicode (hWnd=0x102c4) returned 1 [0124.826] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.826] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xca0328) returned 0x1 [0124.826] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x1 [0124.827] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.827] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.827] SetCursor (hCursor=0x10005) returned 0x10005 [0124.828] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.828] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.828] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x200, wParam=0x0, lParam=0x2500e9) returned 0x0 [0124.828] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.828] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.828] GetKeyState (nVirtKey=1) returned 0 [0124.828] GetKeyState (nVirtKey=2) returned 0 [0124.828] GetKeyState (nVirtKey=4) returned 0 [0124.828] GetKeyState (nVirtKey=5) returned 0 [0124.828] GetKeyState (nVirtKey=6) returned 0 [0124.828] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.829] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.829] WaitMessage () returned 1 [0124.854] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.854] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xc80326) returned 0x1 [0124.854] IsWindowUnicode (hWnd=0x102c4) returned 1 [0124.854] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.854] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xc80326) returned 0x1 [0124.854] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x1 [0124.855] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.855] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.855] SetCursor (hCursor=0x10005) returned 0x10005 [0124.855] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.856] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.856] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x200, wParam=0x0, lParam=0x2300e7) returned 0x0 [0124.856] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.856] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.856] GetKeyState (nVirtKey=1) returned 0 [0124.856] GetKeyState (nVirtKey=2) returned 0 [0124.856] GetKeyState (nVirtKey=4) returned 0 [0124.856] GetKeyState (nVirtKey=5) returned 0 [0124.856] GetKeyState (nVirtKey=6) returned 0 [0124.856] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.857] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.857] WaitMessage () returned 1 [0124.882] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.882] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xbe031c) returned 0x1 [0124.882] IsWindowUnicode (hWnd=0x102c4) returned 1 [0124.882] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.883] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xbe031c) returned 0x1 [0124.883] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x1 [0124.883] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.884] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.884] SetCursor (hCursor=0x10005) returned 0x10005 [0124.884] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.884] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.885] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x200, wParam=0x0, lParam=0x1900dd) returned 0x0 [0124.885] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.885] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.885] GetKeyState (nVirtKey=1) returned 0 [0124.885] GetKeyState (nVirtKey=2) returned 0 [0124.885] GetKeyState (nVirtKey=4) returned 0 [0124.885] GetKeyState (nVirtKey=5) returned 0 [0124.885] GetKeyState (nVirtKey=6) returned 0 [0124.885] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.885] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.886] WaitMessage () returned 1 [0124.912] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.912] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xbd0319) returned 0x1 [0124.912] IsWindowUnicode (hWnd=0x102c4) returned 1 [0124.912] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.912] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xbd0319) returned 0x1 [0124.913] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x1 [0124.913] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.913] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.913] SetCursor (hCursor=0x10005) returned 0x10005 [0124.914] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.914] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.914] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x200, wParam=0x0, lParam=0x1800da) returned 0x0 [0124.914] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.915] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.915] GetKeyState (nVirtKey=1) returned 0 [0124.915] GetKeyState (nVirtKey=2) returned 0 [0124.915] GetKeyState (nVirtKey=4) returned 0 [0124.915] GetKeyState (nVirtKey=5) returned 0 [0124.915] GetKeyState (nVirtKey=6) returned 0 [0124.915] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.915] IsWindowUnicode (hWnd=0x102d6) returned 1 [0124.915] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.915] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.915] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.916] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.916] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.916] WaitMessage () returned 1 [0124.945] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.945] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xb40306) returned 0x1 [0124.945] IsWindowUnicode (hWnd=0x102c4) returned 1 [0124.945] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.946] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xb40306) returned 0x1 [0124.946] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x1 [0124.946] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.946] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.947] SetCursor (hCursor=0x10005) returned 0x10005 [0124.947] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.947] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.947] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x200, wParam=0x0, lParam=0xf00c7) returned 0x0 [0124.947] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.947] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.947] GetKeyState (nVirtKey=1) returned 0 [0124.947] GetKeyState (nVirtKey=2) returned 0 [0124.948] GetKeyState (nVirtKey=4) returned 0 [0124.948] GetKeyState (nVirtKey=5) returned 0 [0124.948] GetKeyState (nVirtKey=6) returned 0 [0124.948] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.948] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.948] WaitMessage () returned 1 [0124.973] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.973] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xa802f3) returned 0x1 [0124.974] IsWindowUnicode (hWnd=0x102c4) returned 1 [0124.974] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0124.974] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xa802f3) returned 0x1 [0124.974] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x1 [0124.974] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.974] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0124.975] SetCursor (hCursor=0x10005) returned 0x10005 [0124.975] TranslateMessage (lpMsg=0x119f22c) returned 0 [0124.975] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0124.975] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x200, wParam=0x0, lParam=0x300b4) returned 0x0 [0124.975] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.975] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0124.976] GetKeyState (nVirtKey=1) returned 0 [0124.976] GetKeyState (nVirtKey=2) returned 0 [0124.976] GetKeyState (nVirtKey=4) returned 0 [0124.976] GetKeyState (nVirtKey=5) returned 0 [0124.976] GetKeyState (nVirtKey=6) returned 0 [0124.976] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.976] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0124.976] WaitMessage () returned 1 [0125.002] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.002] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xa702f2) returned 0x1 [0125.002] IsWindowUnicode (hWnd=0x102c4) returned 1 [0125.002] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.003] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x84, wParam=0x0, lParam=0xa702f2) returned 0x1 [0125.003] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x1 [0125.003] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0125.003] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x102c4, lParam=0x2000001) returned 0x0 [0125.004] SetCursor (hCursor=0x10005) returned 0x10005 [0125.004] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.004] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.004] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x200, wParam=0x0, lParam=0x200b3) returned 0x0 [0125.004] SendMessageW (hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0125.004] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x204e, wParam=0x102c4, lParam=0x119e570) returned 0x0 [0125.004] GetKeyState (nVirtKey=1) returned 0 [0125.004] GetKeyState (nVirtKey=2) returned 0 [0125.004] GetKeyState (nVirtKey=4) returned 0 [0125.005] GetKeyState (nVirtKey=5) returned 0 [0125.005] GetKeyState (nVirtKey=6) returned 0 [0125.005] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.005] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.005] WaitMessage () returned 1 [0125.024] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.024] IsWindowUnicode (hWnd=0x102d6) returned 1 [0125.024] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.024] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.024] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.024] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.024] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.024] WaitMessage () returned 1 [0125.032] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.032] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x84, wParam=0x0, lParam=0x9902dc) returned 0x1 [0125.032] IsWindowUnicode (hWnd=0x102c2) returned 1 [0125.033] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.033] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.033] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.033] CallWindowProcW (lpPrevWndFunc=0x73fc1e0d, hWnd=0x102c4, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0125.033] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.033] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x84, wParam=0x0, lParam=0x9902dc) returned 0x1 [0125.033] IsWindowUnicode (hWnd=0x102c2) returned 1 [0125.033] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.034] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x84, wParam=0x0, lParam=0x9902dc) returned 0x1 [0125.034] SetCursor (hCursor=0x10003) returned 0x10005 [0125.034] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.034] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.034] _TrackMouseEvent (in: lpEventTrack=0x30c7ddc | out: lpEventTrack=0x30c7ddc) returned 1 [0125.034] SendMessageW (hWnd=0x102c2, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0125.034] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0125.035] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x200, wParam=0x0, lParam=0x600a2) returned 0x0 [0125.035] GetKeyState (nVirtKey=1) returned 0 [0125.035] GetKeyState (nVirtKey=2) returned 0 [0125.035] GetKeyState (nVirtKey=4) returned 0 [0125.035] GetKeyState (nVirtKey=5) returned 0 [0125.035] GetKeyState (nVirtKey=6) returned 0 [0125.035] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.035] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.035] WaitMessage () returned 1 [0125.063] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.064] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x84, wParam=0x0, lParam=0x9402d5) returned 0x1 [0125.064] IsWindowUnicode (hWnd=0x102c2) returned 1 [0125.064] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.064] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x84, wParam=0x0, lParam=0x9402d5) returned 0x1 [0125.064] SetCursor (hCursor=0x10003) returned 0x10003 [0125.065] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.065] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.065] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x200, wParam=0x0, lParam=0x1009b) returned 0x0 [0125.065] GetKeyState (nVirtKey=1) returned 0 [0125.065] GetKeyState (nVirtKey=2) returned 0 [0125.065] GetKeyState (nVirtKey=4) returned 0 [0125.065] GetKeyState (nVirtKey=5) returned 0 [0125.065] GetKeyState (nVirtKey=6) returned 0 [0125.065] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.065] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.065] WaitMessage () returned 1 [0125.091] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.091] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x8302b7) returned 0x1 [0125.092] IsWindowUnicode (hWnd=0x30258) returned 1 [0125.092] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.092] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.092] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.092] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x102c2, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0125.092] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.092] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x8302b7) returned 0x1 [0125.092] IsWindowUnicode (hWnd=0x30258) returned 1 [0125.092] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.092] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x84, wParam=0x0, lParam=0x8302b7) returned 0x1 [0125.092] SetCursor (hCursor=0x10003) returned 0x10003 [0125.092] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.092] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.092] _TrackMouseEvent (in: lpEventTrack=0x2ec22d8 | out: lpEventTrack=0x2ec22d8) returned 1 [0125.092] SendMessageW (hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0125.092] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xc121, wParam=0x0, lParam=0x0) returned 0x0 [0125.092] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x200, wParam=0x0, lParam=0x10089) returned 0x0 [0125.092] GetKeyState (nVirtKey=1) returned 0 [0125.092] GetKeyState (nVirtKey=2) returned 0 [0125.092] GetKeyState (nVirtKey=4) returned 0 [0125.092] GetKeyState (nVirtKey=5) returned 0 [0125.093] GetKeyState (nVirtKey=6) returned 0 [0125.093] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.093] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.093] WaitMessage () returned 1 [0125.122] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.123] IsWindowUnicode (hWnd=0x30258) returned 1 [0125.123] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.123] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.123] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.123] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0125.123] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.124] IsWindowUnicode (hWnd=0x30258) returned 1 [0125.124] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.124] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2000002) returned 0x0 [0125.125] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.125] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.125] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa0, wParam=0x2, lParam=0x8102b2) returned 0x0 [0125.125] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.125] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.125] WaitMessage () returned 1 [0125.133] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.133] IsWindowUnicode (hWnd=0x102d6) returned 1 [0125.133] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.134] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.134] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.134] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.134] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.134] WaitMessage () returned 1 [0125.153] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.154] IsWindowUnicode (hWnd=0x30258) returned 1 [0125.154] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.154] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2000002) returned 0x0 [0125.154] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.154] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.154] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa0, wParam=0x2, lParam=0x7c02a4) returned 0x0 [0125.155] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.155] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.155] WaitMessage () returned 1 [0125.183] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.183] IsWindowUnicode (hWnd=0x30258) returned 1 [0125.183] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.184] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2000002) returned 0x0 [0125.184] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.184] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.184] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa0, wParam=0x2, lParam=0x7b0293) returned 0x0 [0125.184] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.184] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.184] WaitMessage () returned 1 [0125.230] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.230] IsWindowUnicode (hWnd=0x30258) returned 1 [0125.230] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.230] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2000002) returned 0x0 [0125.231] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.231] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.231] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa0, wParam=0x2, lParam=0x7a0291) returned 0x0 [0125.231] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.231] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.231] WaitMessage () returned 1 [0125.242] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.243] IsWindowUnicode (hWnd=0x30258) returned 1 [0125.243] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.243] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2000002) returned 0x0 [0125.243] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.243] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.243] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa0, wParam=0x2, lParam=0x79028b) returned 0x0 [0125.243] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.244] IsWindowUnicode (hWnd=0x102d6) returned 1 [0125.244] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.244] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.244] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.244] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.244] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.244] WaitMessage () returned 1 [0125.272] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.272] IsWindowUnicode (hWnd=0x30258) returned 1 [0125.272] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.272] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2000002) returned 0x0 [0125.272] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.272] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.272] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa0, wParam=0x2, lParam=0x780289) returned 0x0 [0125.273] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.273] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.273] WaitMessage () returned 1 [0125.304] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.304] IsWindowUnicode (hWnd=0x30258) returned 1 [0125.305] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.305] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2000002) returned 0x0 [0125.306] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.306] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.306] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa0, wParam=0x2, lParam=0x780288) returned 0x0 [0125.306] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.306] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.306] WaitMessage () returned 1 [0125.352] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.352] IsWindowUnicode (hWnd=0x102d6) returned 1 [0125.352] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.352] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.352] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.352] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.353] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.353] WaitMessage () returned 1 [0125.462] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.462] IsWindowUnicode (hWnd=0x102d6) returned 1 [0125.462] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.462] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.462] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.462] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.463] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.463] WaitMessage () returned 1 [0125.571] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.571] IsWindowUnicode (hWnd=0x102d6) returned 1 [0125.571] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.571] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.572] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.572] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.572] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.572] WaitMessage () returned 1 [0125.680] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.680] IsWindowUnicode (hWnd=0x102d6) returned 1 [0125.680] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.680] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.680] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.680] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.680] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.680] WaitMessage () returned 1 [0125.789] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.789] IsWindowUnicode (hWnd=0x102d6) returned 1 [0125.789] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.789] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.789] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.789] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.789] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.789] WaitMessage () returned 1 [0125.899] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.900] IsWindowUnicode (hWnd=0x102d6) returned 1 [0125.900] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0125.900] TranslateMessage (lpMsg=0x119f22c) returned 0 [0125.900] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0125.900] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.900] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0125.900] WaitMessage () returned 1 [0126.010] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.010] IsWindowUnicode (hWnd=0x102d6) returned 1 [0126.010] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.010] TranslateMessage (lpMsg=0x119f22c) returned 0 [0126.010] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0126.011] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.011] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.011] WaitMessage () returned 1 [0126.118] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.118] IsWindowUnicode (hWnd=0x102d6) returned 1 [0126.118] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.118] TranslateMessage (lpMsg=0x119f22c) returned 0 [0126.119] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0126.119] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.119] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.119] WaitMessage () returned 1 [0126.235] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.235] IsWindowUnicode (hWnd=0x102d6) returned 1 [0126.235] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.235] TranslateMessage (lpMsg=0x119f22c) returned 0 [0126.235] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0126.236] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.236] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.236] WaitMessage () returned 1 [0126.337] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.337] IsWindowUnicode (hWnd=0x102d6) returned 1 [0126.337] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.337] TranslateMessage (lpMsg=0x119f22c) returned 0 [0126.337] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0126.338] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.338] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.338] WaitMessage () returned 1 [0126.446] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.446] IsWindowUnicode (hWnd=0x102d6) returned 1 [0126.446] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.446] TranslateMessage (lpMsg=0x119f22c) returned 0 [0126.447] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0126.447] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.447] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.447] WaitMessage () returned 1 [0126.556] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.556] IsWindowUnicode (hWnd=0x102d6) returned 1 [0126.556] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.556] TranslateMessage (lpMsg=0x119f22c) returned 0 [0126.556] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0126.556] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.556] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.556] WaitMessage () returned 1 [0126.665] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.665] IsWindowUnicode (hWnd=0x102d6) returned 1 [0126.665] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.665] TranslateMessage (lpMsg=0x119f22c) returned 0 [0126.665] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0126.665] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.666] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.666] WaitMessage () returned 1 [0126.774] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.774] IsWindowUnicode (hWnd=0x102d6) returned 1 [0126.775] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.775] TranslateMessage (lpMsg=0x119f22c) returned 0 [0126.775] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0126.775] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.775] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.775] WaitMessage () returned 1 [0126.883] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.883] IsWindowUnicode (hWnd=0x102d6) returned 1 [0126.883] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.883] TranslateMessage (lpMsg=0x119f22c) returned 0 [0126.883] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0126.883] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.883] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.883] WaitMessage () returned 1 [0126.994] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.994] IsWindowUnicode (hWnd=0x102d6) returned 1 [0126.994] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0126.994] TranslateMessage (lpMsg=0x119f22c) returned 0 [0126.994] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0126.995] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.995] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0126.995] WaitMessage () returned 1 [0127.102] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.102] IsWindowUnicode (hWnd=0x102d6) returned 1 [0127.102] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.102] TranslateMessage (lpMsg=0x119f22c) returned 0 [0127.102] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0127.103] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.103] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.103] WaitMessage () returned 1 [0127.212] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.212] IsWindowUnicode (hWnd=0x102d6) returned 1 [0127.212] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.212] TranslateMessage (lpMsg=0x119f22c) returned 0 [0127.212] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0127.213] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.213] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.213] WaitMessage () returned 1 [0127.322] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.322] IsWindowUnicode (hWnd=0x102d6) returned 1 [0127.322] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.322] TranslateMessage (lpMsg=0x119f22c) returned 0 [0127.322] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0127.322] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.322] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.322] WaitMessage () returned 1 [0127.431] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.431] IsWindowUnicode (hWnd=0x102d6) returned 1 [0127.431] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.431] TranslateMessage (lpMsg=0x119f22c) returned 0 [0127.431] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0127.431] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.431] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.431] WaitMessage () returned 1 [0127.540] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.540] IsWindowUnicode (hWnd=0x102d6) returned 1 [0127.540] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.540] TranslateMessage (lpMsg=0x119f22c) returned 0 [0127.540] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0127.541] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.541] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.541] WaitMessage () returned 1 [0127.649] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.650] IsWindowUnicode (hWnd=0x102d6) returned 1 [0127.650] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.650] TranslateMessage (lpMsg=0x119f22c) returned 0 [0127.650] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0127.650] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.650] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.650] WaitMessage () returned 1 [0127.758] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.758] IsWindowUnicode (hWnd=0x102d6) returned 1 [0127.758] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.758] TranslateMessage (lpMsg=0x119f22c) returned 0 [0127.758] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0127.759] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.759] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.759] WaitMessage () returned 1 [0127.868] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.868] IsWindowUnicode (hWnd=0x102d6) returned 1 [0127.868] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.868] TranslateMessage (lpMsg=0x119f22c) returned 0 [0127.869] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0127.869] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.869] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.869] WaitMessage () returned 1 [0127.977] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.978] IsWindowUnicode (hWnd=0x102d6) returned 1 [0127.978] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0127.978] TranslateMessage (lpMsg=0x119f22c) returned 0 [0127.978] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0127.978] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.978] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0127.978] WaitMessage () returned 1 [0128.087] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0128.087] IsWindowUnicode (hWnd=0x102d6) returned 1 [0128.087] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0128.087] TranslateMessage (lpMsg=0x119f22c) returned 0 [0128.087] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0128.088] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0128.088] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0128.088] WaitMessage () returned 1 [0128.197] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0128.198] IsWindowUnicode (hWnd=0x102d6) returned 1 [0128.198] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0128.198] TranslateMessage (lpMsg=0x119f22c) returned 0 [0128.198] DispatchMessageW (lpMsg=0x119f22c) returned 0x0 [0128.198] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0128.198] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 0 [0128.198] WaitMessage () returned 1 [0128.206] PeekMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x119f22c) returned 1 [0128.207] IsWindowUnicode (hWnd=0x30258) returned 1 [0128.207] GetMessageW (in: lpMsg=0x119f22c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x119f22c) returned 1 [0128.207] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x20, wParam=0x30258, lParam=0x2010002) returned 0x0 [0128.207] TranslateMessage (lpMsg=0x119f22c) returned 0 [0128.207] DispatchMessageW (lpMsg=0x119f22c) [0128.207] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0xa1, wParam=0x2, lParam=0x780288) [0128.207] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x112, wParam=0xf012, lParam=0x780288) [0128.561] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0128.561] GetCapture () returned 0x0 [0128.563] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x231, wParam=0x0, lParam=0x0) returned 0x0 [0128.564] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x2a2, wParam=0x0, lParam=0x0) returned 0x0 [0128.564] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x216, wParam=0x9, lParam=0x119e500) returned 0x0 [0128.564] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x46, wParam=0x0, lParam=0x119e4f0) returned 0x0 [0128.566] GetWindowPlacement (in: hWnd=0x30258, lpwndpl=0x119e284 | out: lpwndpl=0x119e284) returned 1 [0128.566] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x47, wParam=0x0, lParam=0x119e4f0) returned 0x0 [0128.566] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x3, wParam=0x0, lParam=0x8a022f) returned 0x0 [0128.566] GetClientRect (in: hWnd=0x30258, lpRect=0x119dc70 | out: lpRect=0x119dc70) returned 1 [0128.566] GetWindowRect (in: hWnd=0x30258, lpRect=0x119dc70 | out: lpRect=0x119dc70) returned 1 [0128.566] GetClientRect (in: hWnd=0x30258, lpRect=0x119e234 | out: lpRect=0x119e234) returned 1 [0128.566] GetWindowRect (in: hWnd=0x30258, lpRect=0x119e234 | out: lpRect=0x119e234) returned 1 [0128.566] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0128.567] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0128.567] CallWindowProcW (lpPrevWndFunc=0x7431bdea, hWnd=0x30258, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 Thread: id = 10 os_tid = 0x9dc Thread: id = 11 os_tid = 0x3b4 [0091.532] CoGetContextToken (in: pToken=0x4fafadc | out: pToken=0x4fafadc) returned 0x800401f0 [0091.532] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0091.532] RoInitialize () returned 0x1 [0091.532] RoUninitialize () returned 0x1 [0104.634] GdipDeleteRegion (region=0x56199e8) returned 0x0 [0104.634] GdipDeleteMatrix (matrix=0x5603670) returned 0x0 [0104.634] GdipDeleteRegion (region=0x56086d8) returned 0x0 [0104.635] RegCloseKey (hKey=0x298) returned 0x0 Thread: id = 12 os_tid = 0x0 Thread: id = 13 os_tid = 0x60c Thread: id = 14 os_tid = 0x4e0 Thread: id = 15 os_tid = 0x944 Process: id = "3" image_name = "#decryptor.exe" filename = "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe" page_root = "0x6ed8f000" os_pid = "0x3c0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe\" " cur_dir = "C:\\Windows\\system32\\" os_username = "FIVAUF\\5JgHKoaOfdp" os_groups = "FIVAUF\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011e5e" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 451 start_va = 0x990000 end_va = 0x9f7fff entry_point = 0x990000 region_type = mapped_file name = "#decryptor.exe" filename = "\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe") Region: id = 452 start_va = 0xa00000 end_va = 0xa1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a00000" filename = "" Region: id = 453 start_va = 0xa20000 end_va = 0xa20fff entry_point = 0x0 region_type = private name = "private_0x0000000000a20000" filename = "" Region: id = 454 start_va = 0xa30000 end_va = 0xa3efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a30000" filename = "" Region: id = 455 start_va = 0xa40000 end_va = 0xa7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a40000" filename = "" Region: id = 456 start_va = 0xa80000 end_va = 0xb7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a80000" filename = "" Region: id = 457 start_va = 0x77540000 end_va = 0x776a7fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 458 start_va = 0x7ff30000 end_va = 0x7ff52fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ff30000" filename = "" Region: id = 459 start_va = 0x7ff5b000 end_va = 0x7ff5dfff entry_point = 0x0 region_type = private name = "private_0x000000007ff5b000" filename = "" Region: id = 460 start_va = 0x7ff5e000 end_va = 0x7ff5efff entry_point = 0x0 region_type = private name = "private_0x000000007ff5e000" filename = "" Region: id = 461 start_va = 0x7ff5f000 end_va = 0x7ff5ffff entry_point = 0x0 region_type = private name = "private_0x000000007ff5f000" filename = "" Region: id = 462 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 463 start_va = 0x7fff0000 end_va = 0x7ff8927dffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 464 start_va = 0x7ff8927e0000 end_va = 0x7ff892989fff entry_point = 0x7ff8927e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 465 start_va = 0x7ff89298a000 end_va = 0x7ffffffeffff entry_point = 0x0 region_type = private name = "private_0x00007ff89298a000" filename = "" Region: id = 592 start_va = 0xb80000 end_va = 0xb83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 593 start_va = 0xb90000 end_va = 0xb90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b90000" filename = "" Region: id = 594 start_va = 0xba0000 end_va = 0xba1fff entry_point = 0x0 region_type = private name = "private_0x0000000000ba0000" filename = "" Region: id = 595 start_va = 0xc40000 end_va = 0xc4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 596 start_va = 0x77470000 end_va = 0x774b8fff entry_point = 0x77470000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 597 start_va = 0x774c0000 end_va = 0x77527fff entry_point = 0x774c0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 598 start_va = 0x77530000 end_va = 0x77538fff entry_point = 0x77530000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 599 start_va = 0xd20000 end_va = 0xe1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d20000" filename = "" Region: id = 600 start_va = 0x74ea0000 end_va = 0x74ef5fff entry_point = 0x74ea0000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 601 start_va = 0x756d0000 end_va = 0x7580ffff entry_point = 0x756d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 602 start_va = 0x759a0000 end_va = 0x75a6efff entry_point = 0x759a0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 603 start_va = 0xa00000 end_va = 0xa0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 604 start_va = 0xbb0000 end_va = 0xc2dfff entry_point = 0xbb0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 605 start_va = 0xef0000 end_va = 0xefffff entry_point = 0x0 region_type = private name = "private_0x0000000000ef0000" filename = "" Region: id = 606 start_va = 0x74e00000 end_va = 0x74e98fff entry_point = 0x74e00000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 607 start_va = 0x7fe30000 end_va = 0x7ff2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007fe30000" filename = "" Region: id = 608 start_va = 0xa10000 end_va = 0xa13fff entry_point = 0x0 region_type = private name = "private_0x0000000000a10000" filename = "" Region: id = 609 start_va = 0x74f00000 end_va = 0x74f52fff entry_point = 0x74f00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 610 start_va = 0x74f60000 end_va = 0x74f68fff entry_point = 0x74f60000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 611 start_va = 0x74f70000 end_va = 0x74f8cfff entry_point = 0x74f70000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 612 start_va = 0x750b0000 end_va = 0x75160fff entry_point = 0x750b0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 613 start_va = 0x75170000 end_va = 0x751e7fff entry_point = 0x75170000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 614 start_va = 0x75d30000 end_va = 0x75dedfff entry_point = 0x75d30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 615 start_va = 0x75f30000 end_va = 0x75f6dfff entry_point = 0x75f30000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 616 start_va = 0x1060000 end_va = 0x106ffff entry_point = 0x0 region_type = private name = "private_0x0000000001060000" filename = "" Region: id = 617 start_va = 0x74d80000 end_va = 0x74dfdfff entry_point = 0x74d80000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 618 start_va = 0x755c0000 end_va = 0x756c7fff entry_point = 0x755c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 619 start_va = 0x75be0000 end_va = 0x75d2efff entry_point = 0x75be0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 620 start_va = 0x76120000 end_va = 0x76160fff entry_point = 0x76120000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 621 start_va = 0x77320000 end_va = 0x7746dfff entry_point = 0x77320000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 622 start_va = 0x1070000 end_va = 0x11f7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001070000" filename = "" Region: id = 623 start_va = 0x758a0000 end_va = 0x75996fff entry_point = 0x758a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 624 start_va = 0x75df0000 end_va = 0x75e14fff entry_point = 0x75df0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 625 start_va = 0xa20000 end_va = 0xa20fff entry_point = 0x0 region_type = private name = "private_0x0000000000a20000" filename = "" Region: id = 626 start_va = 0xc30000 end_va = 0xc30fff entry_point = 0x0 region_type = private name = "private_0x0000000000c30000" filename = "" Region: id = 627 start_va = 0x1200000 end_va = 0x1380fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001200000" filename = "" Region: id = 628 start_va = 0x1390000 end_va = 0x278ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001390000" filename = "" Region: id = 629 start_va = 0x74600000 end_va = 0x746d6fff entry_point = 0x74600000 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll") Region: id = 630 start_va = 0x746e0000 end_va = 0x74d7afff entry_point = 0x746e0000 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 631 start_va = 0xc50000 end_va = 0xc50fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c50000" filename = "" Region: id = 632 start_va = 0xc60000 end_va = 0xc6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c60000" filename = "" Region: id = 633 start_va = 0xc70000 end_va = 0xc7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c70000" filename = "" Region: id = 634 start_va = 0xc80000 end_va = 0xc8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c80000" filename = "" Region: id = 635 start_va = 0xc90000 end_va = 0xc9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c90000" filename = "" Region: id = 636 start_va = 0xca0000 end_va = 0xcaffff entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 637 start_va = 0xcb0000 end_va = 0xcbffff entry_point = 0x0 region_type = private name = "private_0x0000000000cb0000" filename = "" Region: id = 638 start_va = 0xcc0000 end_va = 0xcc0fff entry_point = 0x0 region_type = private name = "private_0x0000000000cc0000" filename = "" Region: id = 639 start_va = 0xcd0000 end_va = 0xcd0fff entry_point = 0x0 region_type = private name = "private_0x0000000000cd0000" filename = "" Region: id = 640 start_va = 0xce0000 end_va = 0xd1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ce0000" filename = "" Region: id = 641 start_va = 0xe20000 end_va = 0xebffff entry_point = 0x0 region_type = private name = "private_0x0000000000e20000" filename = "" Region: id = 642 start_va = 0xee0000 end_va = 0xeeffff entry_point = 0x0 region_type = private name = "private_0x0000000000ee0000" filename = "" Region: id = 643 start_va = 0xf00000 end_va = 0xffffff entry_point = 0x0 region_type = private name = "private_0x0000000000f00000" filename = "" Region: id = 644 start_va = 0x1000000 end_va = 0x103ffff entry_point = 0x0 region_type = private name = "private_0x0000000001000000" filename = "" Region: id = 645 start_va = 0x2790000 end_va = 0x288ffff entry_point = 0x0 region_type = private name = "private_0x0000000002790000" filename = "" Region: id = 646 start_va = 0x2950000 end_va = 0x295ffff entry_point = 0x0 region_type = private name = "private_0x0000000002950000" filename = "" Region: id = 647 start_va = 0x2960000 end_va = 0x495ffff entry_point = 0x0 region_type = private name = "private_0x0000000002960000" filename = "" Region: id = 648 start_va = 0x4960000 end_va = 0x4c34fff entry_point = 0x4960000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 649 start_va = 0x73560000 end_va = 0x745f4fff entry_point = 0x73560000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\c90ef9a73ea0044641d31b19023aad61\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\c90ef9a73ea0044641d31b19023aad61\\mscorlib.ni.dll") Region: id = 650 start_va = 0x7ff55000 end_va = 0x7ff57fff entry_point = 0x0 region_type = private name = "private_0x000000007ff55000" filename = "" Region: id = 651 start_va = 0x7ff58000 end_va = 0x7ff5afff entry_point = 0x0 region_type = private name = "private_0x000000007ff58000" filename = "" Region: id = 652 start_va = 0x74f90000 end_va = 0x7509bfff entry_point = 0x74f90000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 653 start_va = 0x73550000 end_va = 0x73558fff entry_point = 0x73550000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 654 start_va = 0x73470000 end_va = 0x7354afff entry_point = 0x73470000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 655 start_va = 0xec0000 end_va = 0xedffff entry_point = 0x0 region_type = private name = "private_0x0000000000ec0000" filename = "" Region: id = 656 start_va = 0xec0000 end_va = 0xec0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ec0000" filename = "" Region: id = 657 start_va = 0xed0000 end_va = 0xedffff entry_point = 0x0 region_type = private name = "private_0x0000000000ed0000" filename = "" Region: id = 658 start_va = 0x4c40000 end_va = 0x4d30fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004c40000" filename = "" Region: id = 659 start_va = 0xec0000 end_va = 0xec3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ec0000" filename = "" Region: id = 660 start_va = 0x1040000 end_va = 0x1043fff entry_point = 0x0 region_type = private name = "private_0x0000000001040000" filename = "" Region: id = 661 start_va = 0x721d0000 end_va = 0x7224cfff entry_point = 0x721d0000 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 662 start_va = 0x72250000 end_va = 0x72428fff entry_point = 0x72250000 region_type = mapped_file name = "microsoft.visualbasic.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\288e4f2cf5b7a96028c8bb3fce6dc043\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\288e4f2cf5b7a96028c8bb3fce6dc043\\microsoft.visualbasic.ni.dll") Region: id = 663 start_va = 0x72430000 end_va = 0x72ad2fff entry_point = 0x72430000 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\c1194e56644c7688e7eb0f68a57dcc30\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\c1194e56644c7688e7eb0f68a57dcc30\\system.core.ni.dll") Region: id = 664 start_va = 0x72ae0000 end_va = 0x7346cfff entry_point = 0x72ae0000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\c24d08cc4e93fc4f6f15a637b00a2721\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\c24d08cc4e93fc4f6f15a637b00a2721\\system.ni.dll") Region: id = 665 start_va = 0x75ab0000 end_va = 0x75b36fff entry_point = 0x75ab0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 666 start_va = 0x1050000 end_va = 0x105ffff entry_point = 0x0 region_type = private name = "private_0x0000000001050000" filename = "" Region: id = 667 start_va = 0x2890000 end_va = 0x289ffff entry_point = 0x0 region_type = private name = "private_0x0000000002890000" filename = "" Region: id = 668 start_va = 0x28a0000 end_va = 0x28affff entry_point = 0x0 region_type = private name = "private_0x00000000028a0000" filename = "" Region: id = 669 start_va = 0x713e0000 end_va = 0x72025fff entry_point = 0x713e0000 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\635558b506364815e8348217e86fdf99\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\635558b506364815e8348217e86fdf99\\system.windows.forms.ni.dll") Region: id = 670 start_va = 0x72030000 end_va = 0x721c1fff entry_point = 0x72030000 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\ddb52221ad0200b7c2e0a308e47d5c7c\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\ddb52221ad0200b7c2e0a308e47d5c7c\\system.drawing.ni.dll") Region: id = 671 start_va = 0x4e00000 end_va = 0x4e0ffff entry_point = 0x0 region_type = private name = "private_0x0000000004e00000" filename = "" Region: id = 672 start_va = 0x28b0000 end_va = 0x2932fff entry_point = 0x28b0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_7c55c866aa0c3ff0\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_7c55c866aa0c3ff0\\comctl32.dll") Region: id = 673 start_va = 0x75810000 end_va = 0x75895fff entry_point = 0x75810000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\SysWOW64\\comctl32.dll" (normalized: "c:\\windows\\syswow64\\comctl32.dll") Region: id = 674 start_va = 0x4e10000 end_va = 0x4ffffff entry_point = 0x0 region_type = private name = "private_0x0000000004e10000" filename = "" Region: id = 675 start_va = 0x713c0000 end_va = 0x713d7fff entry_point = 0x713c0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 676 start_va = 0x712f0000 end_va = 0x713b4fff entry_point = 0x712f0000 region_type = mapped_file name = "system.runtime.remoting.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\0139b8d6c29df85226a7fe833e5cc4f1\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\0139b8d6c29df85226a7fe833e5cc4f1\\system.runtime.remoting.ni.dll") Region: id = 677 start_va = 0x7fdd0000 end_va = 0x7fddffff entry_point = 0x0 region_type = private name = "private_0x000000007fdd0000" filename = "" Region: id = 678 start_va = 0x7fde0000 end_va = 0x7fe2ffff entry_point = 0x0 region_type = private name = "private_0x000000007fde0000" filename = "" Region: id = 679 start_va = 0x28b0000 end_va = 0x28b1fff entry_point = 0x28b0000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 680 start_va = 0x28c0000 end_va = 0x28c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000028c0000" filename = "" Region: id = 681 start_va = 0x28d0000 end_va = 0x28d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000028d0000" filename = "" Region: id = 682 start_va = 0x28e0000 end_va = 0x28e7fff entry_point = 0x28e0000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\System32\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tzres.dll.mui") Region: id = 683 start_va = 0x28b0000 end_va = 0x28b1fff entry_point = 0x28b0000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 684 start_va = 0x28e0000 end_va = 0x28e7fff entry_point = 0x28e0000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\System32\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tzres.dll.mui") Region: id = 685 start_va = 0x751f0000 end_va = 0x7533cfff entry_point = 0x751f0000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\SysWOW64\\GdiPlus.dll" (normalized: "c:\\windows\\syswow64\\gdiplus.dll") Region: id = 686 start_va = 0x28b0000 end_va = 0x28bffff entry_point = 0x0 region_type = private name = "private_0x00000000028b0000" filename = "" Region: id = 687 start_va = 0x28e0000 end_va = 0x291ffff entry_point = 0x0 region_type = private name = "private_0x00000000028e0000" filename = "" Region: id = 688 start_va = 0x4e10000 end_va = 0x4f0ffff entry_point = 0x0 region_type = private name = "private_0x0000000004e10000" filename = "" Region: id = 689 start_va = 0x4ff0000 end_va = 0x4ffffff entry_point = 0x0 region_type = private name = "private_0x0000000004ff0000" filename = "" Region: id = 690 start_va = 0x71170000 end_va = 0x712e1fff entry_point = 0x71170000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\SysWOW64\\DWrite.dll" (normalized: "c:\\windows\\syswow64\\dwrite.dll") Region: id = 691 start_va = 0x7fdcd000 end_va = 0x7fdcffff entry_point = 0x0 region_type = private name = "private_0x000000007fdcd000" filename = "" Region: id = 692 start_va = 0x4d40000 end_va = 0x4de4fff entry_point = 0x4d40000 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\~fontcache-system.dat") Region: id = 693 start_va = 0x2920000 end_va = 0x2923fff entry_point = 0x0 region_type = private name = "private_0x0000000002920000" filename = "" Region: id = 694 start_va = 0x2930000 end_va = 0x2933fff entry_point = 0x0 region_type = private name = "private_0x0000000002930000" filename = "" Region: id = 695 start_va = 0x5000000 end_va = 0x50fffff entry_point = 0x0 region_type = private name = "private_0x0000000005000000" filename = "" Region: id = 696 start_va = 0x5100000 end_va = 0x55f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005100000" filename = "" Region: id = 697 start_va = 0x5600000 end_va = 0x65fffff entry_point = 0x5600000 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\~fontcache-fontface.dat") Region: id = 698 start_va = 0x6600000 end_va = 0x69fffff entry_point = 0x0 region_type = private name = "private_0x0000000006600000" filename = "" Region: id = 699 start_va = 0x4f10000 end_va = 0x4fb2fff entry_point = 0x4f10000 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 700 start_va = 0x6a00000 end_va = 0x6afffff entry_point = 0x0 region_type = private name = "private_0x0000000006a00000" filename = "" Region: id = 701 start_va = 0x710f0000 end_va = 0x7116ffff entry_point = 0x710f0000 region_type = mapped_file name = "riched20.dll" filename = "\\Windows\\SysWOW64\\riched20.dll" (normalized: "c:\\windows\\syswow64\\riched20.dll") Region: id = 702 start_va = 0x710d0000 end_va = 0x710e3fff entry_point = 0x710d0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 703 start_va = 0x71090000 end_va = 0x710c0fff entry_point = 0x71090000 region_type = mapped_file name = "msls31.dll" filename = "\\Windows\\SysWOW64\\msls31.dll" (normalized: "c:\\windows\\syswow64\\msls31.dll") Region: id = 704 start_va = 0x71080000 end_va = 0x71087fff entry_point = 0x71080000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 705 start_va = 0x6b00000 end_va = 0x6efbfff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006b00000" filename = "" Region: id = 706 start_va = 0x6f00000 end_va = 0x7d6ffff entry_point = 0x6f00000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 707 start_va = 0x4f10000 end_va = 0x4f70fff entry_point = 0x4f10000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll") Region: id = 708 start_va = 0x2940000 end_va = 0x2940fff entry_point = 0x0 region_type = private name = "private_0x0000000002940000" filename = "" Region: id = 709 start_va = 0x4df0000 end_va = 0x4df4fff entry_point = 0x4df0000 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 710 start_va = 0x4f80000 end_va = 0x4f80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004f80000" filename = "" Region: id = 711 start_va = 0x7d70000 end_va = 0x7deffff entry_point = 0x0 region_type = private name = "private_0x0000000007d70000" filename = "" Region: id = 712 start_va = 0x4f80000 end_va = 0x4f83fff entry_point = 0x0 region_type = private name = "private_0x0000000004f80000" filename = "" Region: id = 713 start_va = 0x7df0000 end_va = 0x7ef0fff entry_point = 0x0 region_type = private name = "private_0x0000000007df0000" filename = "" Region: id = 714 start_va = 0x4f90000 end_va = 0x4f92fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004f90000" filename = "" Region: id = 715 start_va = 0x70e90000 end_va = 0x71075fff entry_point = 0x70e90000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7\\comctl32.dll") Region: id = 716 start_va = 0x4fa0000 end_va = 0x4fa0fff entry_point = 0x4fa0000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 717 start_va = 0x4fb0000 end_va = 0x4fb1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004fb0000" filename = "" Region: id = 718 start_va = 0x4fa0000 end_va = 0x4faffff entry_point = 0x0 region_type = private name = "private_0x0000000004fa0000" filename = "" Region: id = 719 start_va = 0x76170000 end_va = 0x7731cfff entry_point = 0x76170000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 720 start_va = 0x4fc0000 end_va = 0x4fcffff entry_point = 0x0 region_type = private name = "private_0x0000000004fc0000" filename = "" Region: id = 721 start_va = 0x70e10000 end_va = 0x70e85fff entry_point = 0x70e10000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 722 start_va = 0x4fc0000 end_va = 0x4fc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004fc0000" filename = "" Region: id = 723 start_va = 0x4fd0000 end_va = 0x4fdffff entry_point = 0x0 region_type = private name = "private_0x0000000004fd0000" filename = "" Region: id = 724 start_va = 0x7df0000 end_va = 0x7f51fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007df0000" filename = "" Region: id = 725 start_va = 0x4fd0000 end_va = 0x4fd0fff entry_point = 0x0 region_type = private name = "private_0x0000000004fd0000" filename = "" Region: id = 726 start_va = 0x4fe0000 end_va = 0x4fe0fff entry_point = 0x0 region_type = private name = "private_0x0000000004fe0000" filename = "" Region: id = 727 start_va = 0x4fd0000 end_va = 0x4fd0fff entry_point = 0x0 region_type = private name = "private_0x0000000004fd0000" filename = "" Region: id = 728 start_va = 0x4fd0000 end_va = 0x4fd4fff entry_point = 0x0 region_type = private name = "private_0x0000000004fd0000" filename = "" Region: id = 729 start_va = 0x5100000 end_va = 0x5100fff entry_point = 0x0 region_type = private name = "private_0x0000000005100000" filename = "" Region: id = 730 start_va = 0x5110000 end_va = 0x5127fff entry_point = 0x0 region_type = private name = "private_0x0000000005110000" filename = "" Region: id = 731 start_va = 0x4fd0000 end_va = 0x4fd7fff entry_point = 0x0 region_type = private name = "private_0x0000000004fd0000" filename = "" Region: id = 732 start_va = 0x5130000 end_va = 0x5130fff entry_point = 0x0 region_type = private name = "private_0x0000000005130000" filename = "" Region: id = 733 start_va = 0x70df0000 end_va = 0x70e07fff entry_point = 0x70df0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 734 start_va = 0x70dc0000 end_va = 0x70deefff entry_point = 0x70dc0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 735 start_va = 0x70da0000 end_va = 0x70dbcfff entry_point = 0x70da0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 736 start_va = 0x5100000 end_va = 0x5106fff entry_point = 0x0 region_type = private name = "private_0x0000000005100000" filename = "" Region: id = 737 start_va = 0x5140000 end_va = 0x517ffff entry_point = 0x0 region_type = private name = "private_0x0000000005140000" filename = "" Region: id = 738 start_va = 0x5180000 end_va = 0x527ffff entry_point = 0x0 region_type = private name = "private_0x0000000005180000" filename = "" Region: id = 739 start_va = 0x5280000 end_va = 0x52bffff entry_point = 0x0 region_type = private name = "private_0x0000000005280000" filename = "" Region: id = 740 start_va = 0x52c0000 end_va = 0x53bffff entry_point = 0x0 region_type = private name = "private_0x00000000052c0000" filename = "" Region: id = 741 start_va = 0x53c0000 end_va = 0x53fffff entry_point = 0x0 region_type = private name = "private_0x00000000053c0000" filename = "" Region: id = 742 start_va = 0x5400000 end_va = 0x54fffff entry_point = 0x0 region_type = private name = "private_0x0000000005400000" filename = "" Region: id = 743 start_va = 0x7fdc4000 end_va = 0x7fdc6fff entry_point = 0x0 region_type = private name = "private_0x000000007fdc4000" filename = "" Region: id = 744 start_va = 0x7fdc7000 end_va = 0x7fdc9fff entry_point = 0x0 region_type = private name = "private_0x000000007fdc7000" filename = "" Region: id = 745 start_va = 0x7fdca000 end_va = 0x7fdccfff entry_point = 0x0 region_type = private name = "private_0x000000007fdca000" filename = "" Region: id = 746 start_va = 0x5110000 end_va = 0x5120fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005110000" filename = "" Region: id = 747 start_va = 0x5500000 end_va = 0x553ffff entry_point = 0x0 region_type = private name = "private_0x0000000005500000" filename = "" Region: id = 748 start_va = 0x7f60000 end_va = 0x805ffff entry_point = 0x0 region_type = private name = "private_0x0000000007f60000" filename = "" Region: id = 749 start_va = 0x7fdc1000 end_va = 0x7fdc3fff entry_point = 0x0 region_type = private name = "private_0x000000007fdc1000" filename = "" Thread: id = 16 os_tid = 0x77c [0150.682] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0150.691] RoInitialize () returned 0x1 [0150.691] RoUninitialize () returned 0x1 [0150.982] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc12e [0150.982] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc12f [0151.003] EtwEventRegister (in: ProviderId=0x2962cc4, EnableCallback=0x4e005be, CallbackContext=0x0, RegHandle=0x2962c9c | out: RegHandle=0x2962c9c) returned 0x0 [0151.014] GetCurrentProcess () returned 0xffffffff [0151.014] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb7ea48 | out: TokenHandle=0xb7ea48*=0x218) returned 1 [0151.019] GetCurrentProcess () returned 0xffffffff [0151.019] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0xb7eaa4, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0xb7eaa4*=0x21c) returned 1 [0151.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0151.034] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x75810000 [0151.039] GetModuleHandleW (lpModuleName="user32.dll") returned 0x75be0000 [0151.039] GetProcAddress (hModule=0x75be0000, lpProcName="DefWindowProcW") returned 0x74e1bdea [0151.039] GetStockObject (i=5) returned 0x1900015 [0151.049] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.050] CoTaskMemAlloc (cb=0x5c) returned 0xd7dc50 [0151.050] RegisterClassW (lpWndClass=0xb7e8bc) returned 0xc130 [0151.051] CoTaskMemFree (pv=0xd7dc50) [0151.051] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.051] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x200ee [0151.051] SetWindowLongW (hWnd=0x200ee, nIndex=-4, dwNewLong=1960951274) returned 81790438 [0151.052] GetWindowLongW (hWnd=0x200ee, nIndex=-4) returned 1960951274 [0151.054] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xb7e158 | out: phkResult=0xb7e158*=0x230) returned 0x0 [0151.055] RegQueryValueExW (in: hKey=0x230, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0xb7e178, lpData=0x0, lpcbData=0xb7e174*=0x0 | out: lpType=0xb7e178*=0x0, lpData=0x0, lpcbData=0xb7e174*=0x0) returned 0x2 [0151.055] RegQueryValueExW (in: hKey=0x230, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0xb7e178, lpData=0x0, lpcbData=0xb7e174*=0x0 | out: lpType=0xb7e178*=0x0, lpData=0x0, lpcbData=0xb7e174*=0x0) returned 0x2 [0151.055] RegCloseKey (hKey=0x230) returned 0x0 [0151.062] SetWindowLongW (hWnd=0x200ee, nIndex=-4, dwNewLong=81790478) returned 1960951274 [0151.062] GetWindowLongW (hWnd=0x200ee, nIndex=-4) returned 81790478 [0151.062] GetWindowLongW (hWnd=0x200ee, nIndex=-16) returned 113311744 [0151.062] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc131 [0151.063] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc132 [0151.063] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x200ee, Msg=0x81, wParam=0x0, lParam=0xb7e440) returned 0x1 [0151.063] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x200ee, Msg=0x83, wParam=0x0, lParam=0xb7e42c) returned 0x0 [0151.064] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x200ee, Msg=0x1, wParam=0x0, lParam=0xb7e440) returned 0x0 [0151.065] GetClientRect (in: hWnd=0x200ee, lpRect=0xb7e18c | out: lpRect=0xb7e18c) returned 1 [0151.065] GetWindowRect (in: hWnd=0x200ee, lpRect=0xb7e18c | out: lpRect=0xb7e18c) returned 1 [0151.066] GetParent (hWnd=0x200ee) returned 0x0 [0151.154] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.157] AdjustWindowRectEx (in: lpRect=0xb7e9b0, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0xb7e9b0) returned 1 [0151.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0xb7e434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0151.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0xb7e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0151.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb7e880) returned 1 [0151.175] CreateFileW (lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0151.175] GetFileType (hFile=0x238) returned 0x1 [0151.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb7e87c) returned 1 [0151.175] GetFileType (hFile=0x238) returned 0x1 [0151.175] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.176] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.176] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.177] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.177] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.177] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.177] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.177] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.178] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.178] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.178] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.178] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.179] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.179] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.179] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.179] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.180] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.180] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.180] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.180] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.181] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.181] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.181] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.182] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.182] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.182] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.183] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.183] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.183] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.184] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.184] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.184] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.185] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.185] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.185] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.185] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.186] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.186] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.186] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.187] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.187] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.187] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.187] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.188] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.188] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.188] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.189] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.189] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.189] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.190] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.190] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.190] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.190] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.191] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.191] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.191] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.191] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.192] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.192] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.192] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.192] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.192] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.192] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.193] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.193] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.193] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.193] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.193] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.193] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.193] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.194] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.194] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.194] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.194] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.194] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.195] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.195] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.195] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.195] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.195] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.195] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.196] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.196] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.196] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.196] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.196] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.196] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.197] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.197] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.197] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.197] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.197] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.197] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.197] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.198] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.199] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.200] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.200] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x1000, lpOverlapped=0x0) returned 1 [0151.200] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x405, lpOverlapped=0x0) returned 1 [0151.200] ReadFile (in: hFile=0x238, lpBuffer=0x296ba2d, nNumberOfBytesToRead=0x3fb, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296ba2d*, lpNumberOfBytesRead=0xb7e92c*=0x0, lpOverlapped=0x0) returned 1 [0151.200] ReadFile (in: hFile=0x238, lpBuffer=0x296c69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb7e92c, lpOverlapped=0x0 | out: lpBuffer=0x296c69c*, lpNumberOfBytesRead=0xb7e92c*=0x0, lpOverlapped=0x0) returned 1 [0151.202] CloseHandle (hObject=0x238) returned 1 [0151.209] GetTimeZoneInformation (in: lpTimeZoneInformation=0xb7e830 | out: lpTimeZoneInformation=0xb7e830) returned 0x0 [0151.280] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.280] AdjustWindowRectEx (in: lpRect=0xb7e320, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e320) returned 1 [0151.284] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.284] AdjustWindowRectEx (in: lpRect=0xb7e328, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e328) returned 1 [0151.290] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.290] AdjustWindowRectEx (in: lpRect=0xb7e32c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e32c) returned 1 [0151.291] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.292] AdjustWindowRectEx (in: lpRect=0xb7e324, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e324) returned 1 [0151.293] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.293] AdjustWindowRectEx (in: lpRect=0xb7e328, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e328) returned 1 [0151.297] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.297] AdjustWindowRectEx (in: lpRect=0xb7e32c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e32c) returned 1 [0151.298] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.298] AdjustWindowRectEx (in: lpRect=0xb7e324, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e324) returned 1 [0151.299] GetSystemDefaultLCID () returned 0x409 [0151.300] GetStockObject (i=17) returned 0x10a0047 [0151.302] GetObjectW (in: h=0x10a0047, c=92, pv=0xb7e0fc | out: pv=0xb7e0fc) returned 92 [0151.302] GetDC (hWnd=0x0) returned 0x8010579 [0151.307] GdiplusStartup (in: token=0xc969d8, input=0xb7d6d0, output=0xb7d720 | out: token=0xc969d8, output=0xb7d720) returned 0x0 [0151.310] CoTaskMemAlloc (cb=0x5c) returned 0xd7dbe8 [0151.310] GdipCreateFontFromLogfontW (hdc=0x8010579, logfont=0xd7dbe8, font=0xb7e1c0) returned 0x0 [0151.359] CoTaskMemFree (pv=0xd7dbe8) [0151.360] CoTaskMemAlloc (cb=0x5c) returned 0xd7dff8 [0151.360] CoTaskMemFree (pv=0xd7dff8) [0151.360] CoTaskMemAlloc (cb=0x5c) returned 0xd7e338 [0151.360] CoTaskMemFree (pv=0xd7e338) [0151.360] GdipGetFontUnit (font=0x28b1f08, unit=0xb7e18c) returned 0x0 [0151.360] GdipGetFontSize (font=0x28b1f08, size=0xb7e190) returned 0x0 [0151.361] GdipGetFontStyle (font=0x28b1f08, style=0xb7e188) returned 0x0 [0151.361] GdipGetFamily (font=0x28b1f08, family=0xb7e184) returned 0x0 [0151.361] GdipGetFontSize (font=0x28b1f08, size=0x296b8e4) returned 0x0 [0151.361] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.361] GetDC (hWnd=0x0) returned 0x8010579 [0151.361] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e1a4) returned 0x0 [0151.362] GdipGetDpiY (graphics=0x50186d8, dpi=0x296b9ec) returned 0x0 [0151.362] GdipGetFontHeight (font=0x28b1f08, graphics=0x50186d8, height=0xb7e19c) returned 0x0 [0151.362] GdipGetEmHeight (family=0x5004738, style=0, EmHeight=0xb7e1a4) returned 0x0 [0151.362] GdipGetLineSpacing (family=0x5004738, style=0, LineSpacing=0xb7e1a4) returned 0x0 [0151.362] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.362] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.362] GdipCreateFont (fontFamily=0x5004738, emSize=0x41040000, style=0, unit=0x3, font=0x296b9ac) returned 0x0 [0151.362] GdipGetFontSize (font=0x28bef18, size=0x296b9b0) returned 0x0 [0151.362] GdipDeleteFont (font=0x28b1f08) returned 0x0 [0151.363] GetDC (hWnd=0x0) returned 0x8010579 [0151.363] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e20c) returned 0x0 [0151.363] GdipGetFontHeight (font=0x28bef18, graphics=0x50186d8, height=0xb7e204) returned 0x0 [0151.363] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.363] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.363] GetSystemMetrics (nIndex=5) returned 1 [0151.363] GetSystemMetrics (nIndex=6) returned 1 [0151.363] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.364] AdjustWindowRectEx (in: lpRect=0xb7e324, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e324) returned 1 [0151.365] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.365] AdjustWindowRectEx (in: lpRect=0xb7e32c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e32c) returned 1 [0151.366] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.366] AdjustWindowRectEx (in: lpRect=0xb7e32c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e32c) returned 1 [0151.367] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.367] AdjustWindowRectEx (in: lpRect=0xb7e320, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e320) returned 1 [0151.371] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.371] AdjustWindowRectEx (in: lpRect=0xb7e310, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e310) returned 1 [0151.375] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.375] AdjustWindowRectEx (in: lpRect=0xb7e324, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e324) returned 1 [0151.376] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.376] AdjustWindowRectEx (in: lpRect=0xb7e32c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e32c) returned 1 [0151.377] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.377] AdjustWindowRectEx (in: lpRect=0xb7e324, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e324) returned 1 [0151.378] GetDC (hWnd=0x0) returned 0x8010579 [0151.378] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e20c) returned 0x0 [0151.378] GdipGetFontHeight (font=0x28bef18, graphics=0x50186d8, height=0xb7e204) returned 0x0 [0151.378] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.378] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.378] GetSystemMetrics (nIndex=5) returned 1 [0151.378] GetSystemMetrics (nIndex=6) returned 1 [0151.379] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.379] AdjustWindowRectEx (in: lpRect=0xb7e324, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e324) returned 1 [0151.380] LoadLibraryW (lpLibFileName="RichEd20.DLL") returned 0x710f0000 [0151.385] CoTaskMemAlloc (cb=0x20c) returned 0xd90fa8 [0151.385] GetModuleFileNameW (in: hModule=0x710f0000, lpFilename=0xd90fa8, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL" (normalized: "c:\\windows\\system32\\riched20.dll")) returned 0x20 [0151.385] CoTaskMemFree (pv=0xd90fa8) [0151.385] GetFullPathNameW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0xb7dcb4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0151.386] GetFullPathNameW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0xb7dccc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0151.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb7e14c) returned 1 [0151.386] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL" (normalized: "c:\\windows\\system32\\riched20.dll"), fInfoLevelId=0x0, lpFileInformation=0xb7e1c8 | out: lpFileInformation=0xb7e1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a4a7cf, ftCreationTime.dwHighDateTime=0x1cebd93, ftLastAccessTime.dwLowDateTime=0x64a4a7cf, ftLastAccessTime.dwHighDateTime=0x1cebd93, ftLastWriteTime.dwLowDateTime=0x64a4a7cf, ftLastWriteTime.dwHighDateTime=0x1cebd93, nFileSizeHigh=0x0, nFileSizeLow=0x7d600)) returned 1 [0151.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb7e148) returned 1 [0151.387] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpdwHandle=0xb7e248 | out: lpdwHandle=0xb7e248) returned 0x72c [0151.388] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL", dwHandle=0x0, dwLen=0x72c, lpData=0x296d42c | out: lpData=0x296d42c) returned 1 [0151.388] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xb7e21c, puLen=0xb7e218 | out: lplpBuffer=0xb7e21c*=0x296d7bc, puLen=0xb7e218) returned 1 [0151.390] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0xb7e19c, puLen=0xb7e198 | out: lplpBuffer=0xb7e19c*=0x296d528, puLen=0xb7e198) returned 1 [0151.390] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0xb7e19c, puLen=0xb7e198 | out: lplpBuffer=0xb7e19c*=0x296d57c, puLen=0xb7e198) returned 1 [0151.390] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0xb7e19c, puLen=0xb7e198 | out: lplpBuffer=0xb7e19c*=0x296d5d8, puLen=0xb7e198) returned 1 [0151.390] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0xb7e19c, puLen=0xb7e198 | out: lplpBuffer=0xb7e19c*=0x296d614, puLen=0xb7e198) returned 1 [0151.390] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0xb7e19c, puLen=0xb7e198 | out: lplpBuffer=0xb7e19c*=0x296d64c, puLen=0xb7e198) returned 1 [0151.390] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0xb7e19c, puLen=0xb7e198 | out: lplpBuffer=0xb7e19c*=0x296d6c4, puLen=0xb7e198) returned 1 [0151.390] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0xb7e19c, puLen=0xb7e198 | out: lplpBuffer=0xb7e19c*=0x296d700, puLen=0xb7e198) returned 1 [0151.390] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0xb7e19c, puLen=0xb7e198 | out: lplpBuffer=0xb7e19c*=0x296d774, puLen=0xb7e198) returned 1 [0151.390] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0xb7e19c, puLen=0xb7e198 | out: lplpBuffer=0xb7e19c*=0x296d4dc, puLen=0xb7e198) returned 1 [0151.390] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0xb7e19c, puLen=0xb7e198 | out: lplpBuffer=0xb7e19c*=0x0, puLen=0xb7e198) returned 0 [0151.390] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0xb7e19c, puLen=0xb7e198 | out: lplpBuffer=0xb7e19c*=0x0, puLen=0xb7e198) returned 0 [0151.390] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0xb7e19c, puLen=0xb7e198 | out: lplpBuffer=0xb7e19c*=0x0, puLen=0xb7e198) returned 0 [0151.390] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xb7e190, puLen=0xb7e18c | out: lplpBuffer=0xb7e190*=0x296d7bc, puLen=0xb7e18c) returned 1 [0151.391] VerLanguageNameW (in: wLang=0x0, szLang=0xb7df20, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0151.392] VerQueryValueW (in: pBlock=0x296d42c, lpSubBlock="\\", lplpBuffer=0xb7e1a0, puLen=0xb7e19c | out: lplpBuffer=0xb7e1a0*=0x296d454, puLen=0xb7e19c) returned 1 [0151.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.392] AdjustWindowRectEx (in: lpRect=0xb7e31c, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e31c) returned 1 [0151.393] GetDC (hWnd=0x0) returned 0x8010579 [0151.393] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e260) returned 0x0 [0151.393] GdipGetFontHeight (font=0x28bef18, graphics=0x50186d8, height=0xb7e258) returned 0x0 [0151.393] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.393] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.393] GetSystemMetrics (nIndex=5) returned 1 [0151.393] GetSystemMetrics (nIndex=6) returned 1 [0151.399] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.399] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e2b0) returned 1 [0151.399] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.399] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e2b0) returned 1 [0151.402] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.402] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e2b0) returned 1 [0151.402] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.402] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e2b0) returned 1 [0151.404] GetCurrentThreadId () returned 0x77c [0151.404] GetCurrentThreadId () returned 0x77c [0151.405] GetCurrentThreadId () returned 0x77c [0151.405] GetCurrentThreadId () returned 0x77c [0151.407] GetUserObjectInformationA (in: hObj=0xa4, nIndex=1, pvInfo=0x296f77c, nLength=0xc, lpnLengthNeeded=0xb7e1e8 | out: pvInfo=0x296f77c, lpnLengthNeeded=0xb7e1e8) returned 1 [0151.408] SetConsoleCtrlHandler (HandlerRoutine=0x4e00636, Add=1) returned 1 [0151.409] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.409] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.409] GetClassInfoW (in: hInstance=0x990000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.2bf8098.0", lpWndClass=0x296f7e0 | out: lpWndClass=0x296f7e0) returned 0 [0151.410] CoTaskMemAlloc (cb=0x58) returned 0xd90510 [0151.410] RegisterClassW (lpWndClass=0xb7e13c) returned 0xc137 [0151.410] CoTaskMemFree (pv=0xd90510) [0151.411] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.2bf8098.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.2bf8098.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x1019c [0151.413] NtdllDefWindowProc_W (hWnd=0x1019c, Msg=0x83, wParam=0x0, lParam=0xb7dc7c) returned 0x0 [0151.413] NtdllDefWindowProc_W (hWnd=0x1019c, Msg=0x1, wParam=0x0, lParam=0xb7dc90) returned 0x0 [0151.414] NtdllDefWindowProc_W (hWnd=0x1019c, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0151.414] NtdllDefWindowProc_W (hWnd=0x1019c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0151.415] GetSysColor (nIndex=10) returned 0xb4b4b4 [0151.415] GetSysColor (nIndex=2) returned 0xd1b499 [0151.415] GetSysColor (nIndex=9) returned 0x0 [0151.415] GetSysColor (nIndex=12) returned 0xababab [0151.415] GetSysColor (nIndex=15) returned 0xf0f0f0 [0151.415] GetSysColor (nIndex=20) returned 0xffffff [0151.415] GetSysColor (nIndex=16) returned 0xa0a0a0 [0151.415] GetSysColor (nIndex=15) returned 0xf0f0f0 [0151.415] GetSysColor (nIndex=16) returned 0xa0a0a0 [0151.415] GetSysColor (nIndex=21) returned 0x696969 [0151.415] GetSysColor (nIndex=22) returned 0xe3e3e3 [0151.415] GetSysColor (nIndex=20) returned 0xffffff [0151.415] GetSysColor (nIndex=18) returned 0x0 [0151.415] GetSysColor (nIndex=1) returned 0x0 [0151.415] GetSysColor (nIndex=27) returned 0xead1b9 [0151.415] GetSysColor (nIndex=28) returned 0xf2e4d7 [0151.415] GetSysColor (nIndex=17) returned 0x6d6d6d [0151.415] GetSysColor (nIndex=13) returned 0xff9933 [0151.415] GetSysColor (nIndex=14) returned 0xffffff [0151.415] GetSysColor (nIndex=26) returned 0xcc6600 [0151.415] GetSysColor (nIndex=11) returned 0xfcf7f4 [0151.415] GetSysColor (nIndex=3) returned 0xdbcdbf [0151.415] GetSysColor (nIndex=19) returned 0x0 [0151.415] GetSysColor (nIndex=24) returned 0xe1ffff [0151.415] GetSysColor (nIndex=23) returned 0x0 [0151.415] GetSysColor (nIndex=4) returned 0xf0f0f0 [0151.415] GetSysColor (nIndex=30) returned 0xf0f0f0 [0151.415] GetSysColor (nIndex=29) returned 0xff9933 [0151.415] GetSysColor (nIndex=7) returned 0x0 [0151.415] GetSysColor (nIndex=0) returned 0xc8c8c8 [0151.415] GetSysColor (nIndex=5) returned 0xffffff [0151.415] GetSysColor (nIndex=6) returned 0x646464 [0151.416] GetSysColor (nIndex=8) returned 0x0 [0151.416] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.416] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e2b0) returned 1 [0151.416] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.416] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e2b0) returned 1 [0151.417] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.417] AdjustWindowRectEx (in: lpRect=0xb7e284, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e284) returned 1 [0151.417] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.417] AdjustWindowRectEx (in: lpRect=0xb7e284, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e284) returned 1 [0151.417] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.417] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e2b0) returned 1 [0151.417] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.417] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e2b0) returned 1 [0151.418] GetCurrentThreadId () returned 0x77c [0151.418] GetCurrentThreadId () returned 0x77c [0151.419] GetCurrentThreadId () returned 0x77c [0151.419] GetCurrentThreadId () returned 0x77c [0151.419] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.419] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e2b0) returned 1 [0151.420] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.420] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e2b0) returned 1 [0151.420] GetDC (hWnd=0x0) returned 0x8010579 [0151.420] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e1f0) returned 0x0 [0151.420] GdipGetFontHeight (font=0x28bef18, graphics=0x50186d8, height=0xb7e1e8) returned 0x0 [0151.420] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.420] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.420] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.420] AdjustWindowRectEx (in: lpRect=0xb7e164, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e164) returned 1 [0151.421] GdipGetFamilyName (in: family=0x5004738, name=0xb7e130, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0151.422] CreateCompatibleDC (hdc=0x0) returned 0xd010694 [0151.422] GetCurrentObject (hdc=0xd010694, type=0x1) returned 0x1b00017 [0151.422] GetCurrentObject (hdc=0xd010694, type=0x2) returned 0x1900010 [0151.422] GetCurrentObject (hdc=0xd010694, type=0x7) returned 0x185000f [0151.422] GetCurrentObject (hdc=0xd010694, type=0x6) returned 0x18a0048 [0151.422] SaveDC (hdc=0xd010694) returned 1 [0151.423] GetDeviceCaps (hdc=0xd010694, index=90) returned 96 [0151.423] CoTaskMemAlloc (cb=0x5c) returned 0xd7dd88 [0151.423] CreateFontIndirectW (lplf=0xd7dd88) returned 0x150a06d9 [0151.423] CoTaskMemFree (pv=0xd7dd88) [0151.423] GetObjectW (in: h=0x150a06d9, c=92, pv=0xb7e0f8 | out: pv=0xb7e0f8) returned 92 [0151.424] GetCurrentObject (hdc=0xd010694, type=0x6) returned 0x18a0048 [0151.424] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e0e0 | out: pv=0xb7e0e0) returned 92 [0151.424] SelectObject (hdc=0xd010694, h=0x150a06d9) returned 0x18a0048 [0151.424] GetTextExtentPoint32W (in: hdc=0xd010694, lpString="0", c=1, psizl=0x2970468 | out: psizl=0x2970468) returned 1 [0151.425] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.425] AdjustWindowRectEx (in: lpRect=0xb7e238, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e238) returned 1 [0151.425] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.425] AdjustWindowRectEx (in: lpRect=0xb7e150, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e150) returned 1 [0151.425] GdipGetFamilyName (in: family=0x5004738, name=0xb7e11c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0151.425] GetDeviceCaps (hdc=0xd010694, index=90) returned 96 [0151.425] CoTaskMemAlloc (cb=0x5c) returned 0xd7e130 [0151.425] CreateFontIndirectW (lplf=0xd7e130) returned 0x580a06d6 [0151.425] CoTaskMemFree (pv=0xd7e130) [0151.425] GetObjectW (in: h=0x580a06d6, c=92, pv=0xb7e0e4 | out: pv=0xb7e0e4) returned 92 [0151.425] GetTextExtentPoint32W (in: hdc=0xd010694, lpString="0", c=1, psizl=0x297079c | out: psizl=0x297079c) returned 1 [0151.426] DeleteObject (ho=0x580a06d6) returned 1 [0151.426] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.426] AdjustWindowRectEx (in: lpRect=0xb7e284, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e284) returned 1 [0151.426] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.426] AdjustWindowRectEx (in: lpRect=0xb7e150, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e150) returned 1 [0151.426] GdipGetFamilyName (in: family=0x5004738, name=0xb7e11c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0151.426] GetDeviceCaps (hdc=0xd010694, index=90) returned 96 [0151.426] CoTaskMemAlloc (cb=0x5c) returned 0xd7e268 [0151.426] CreateFontIndirectW (lplf=0xd7e268) returned 0x590a06d6 [0151.426] CoTaskMemFree (pv=0xd7e268) [0151.426] GetObjectW (in: h=0x590a06d6, c=92, pv=0xb7e0e4 | out: pv=0xb7e0e4) returned 92 [0151.427] GetTextExtentPoint32W (in: hdc=0xd010694, lpString="0", c=1, psizl=0x29709e8 | out: psizl=0x29709e8) returned 1 [0151.427] DeleteObject (ho=0x590a06d6) returned 1 [0151.427] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.427] AdjustWindowRectEx (in: lpRect=0xb7e12c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e12c) returned 1 [0151.428] GdipGetFamilyName (in: family=0x5004738, name=0xb7e020, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0151.428] GetDeviceCaps (hdc=0xd010694, index=90) returned 96 [0151.428] CoTaskMemAlloc (cb=0x5c) returned 0xd7e200 [0151.428] CreateFontIndirectW (lplf=0xd7e200) returned 0x5a0a06d6 [0151.428] CoTaskMemFree (pv=0xd7e200) [0151.428] GetObjectW (in: h=0x5a0a06d6, c=92, pv=0xb7dfe8 | out: pv=0xb7dfe8) returned 92 [0151.429] GetMapMode (hdc=0xd010694) returned 1 [0151.429] GetTextMetricsW (in: hdc=0xd010694, lptm=0xb7e00c | out: lptm=0xb7e00c) returned 1 [0151.429] DrawTextExW (in: hdc=0xd010694, lpchText="Send 100$ to this bitcoins adress:", cchText=34, lprc=0xb7e118, format=0x2400, lpdtp=0x2970d04 | out: lpchText="Send 100$ to this bitcoins adress:", lprc=0xb7e118) returned 13 [0151.440] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.440] AdjustWindowRectEx (in: lpRect=0xb7e200, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e200) returned 1 [0151.440] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0xb7e300) returned 0x0 [0151.440] GdipCreateFont (fontFamily=0x5004738, emSize=0x41040000, style=2, unit=0x3, font=0x2970d80) returned 0x0 [0151.440] GdipGetFontSize (font=0x28b1f08, size=0x2970d84) returned 0x0 [0151.440] GetDC (hWnd=0x0) returned 0x8010579 [0151.440] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e2c0) returned 0x0 [0151.440] GdipGetFontHeight (font=0x28b1f08, graphics=0x50186d8, height=0xb7e2b8) returned 0x0 [0151.440] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.440] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.440] GetDC (hWnd=0x0) returned 0x8010579 [0151.440] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e258) returned 0x0 [0151.441] GdipGetFontHeight (font=0x28b1f08, graphics=0x50186d8, height=0xb7e250) returned 0x0 [0151.441] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.441] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.441] GetSystemMetrics (nIndex=5) returned 1 [0151.441] GetSystemMetrics (nIndex=6) returned 1 [0151.441] GetSystemMetrics (nIndex=5) returned 1 [0151.441] GetSystemMetrics (nIndex=6) returned 1 [0151.441] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.441] AdjustWindowRectEx (in: lpRect=0xb7e288, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e288) returned 1 [0151.441] GetSystemMetrics (nIndex=5) returned 1 [0151.441] GetSystemMetrics (nIndex=6) returned 1 [0151.441] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.441] AdjustWindowRectEx (in: lpRect=0xb7e288, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e288) returned 1 [0151.442] GetCurrentThreadId () returned 0x77c [0151.442] GetCurrentThreadId () returned 0x77c [0151.442] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.442] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e2b0) returned 1 [0151.443] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.443] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e2b0) returned 1 [0151.443] GetCurrentThreadId () returned 0x77c [0151.443] GetCurrentThreadId () returned 0x77c [0151.444] GetCurrentThreadId () returned 0x77c [0151.444] GetCurrentThreadId () returned 0x77c [0151.445] GetCurrentThreadId () returned 0x77c [0151.445] GetCurrentThreadId () returned 0x77c [0151.445] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.445] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e2b0) returned 1 [0151.445] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.445] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e2b0) returned 1 [0151.445] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.445] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e2b0) returned 1 [0151.446] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.446] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e2b0) returned 1 [0151.446] GetDC (hWnd=0x0) returned 0x8010579 [0151.446] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e1f0) returned 0x0 [0151.446] GdipGetFontHeight (font=0x28bef18, graphics=0x50186d8, height=0xb7e1e8) returned 0x0 [0151.446] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.446] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.446] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.446] AdjustWindowRectEx (in: lpRect=0xb7e164, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e164) returned 1 [0151.446] GdipGetFamilyName (in: family=0x5004738, name=0xb7e130, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0151.446] GetDeviceCaps (hdc=0xd010694, index=90) returned 96 [0151.446] CoTaskMemAlloc (cb=0x5c) returned 0xd7ddf0 [0151.446] CreateFontIndirectW (lplf=0xd7ddf0) returned 0x460a0582 [0151.446] CoTaskMemFree (pv=0xd7ddf0) [0151.446] GetObjectW (in: h=0x460a0582, c=92, pv=0xb7e0f8 | out: pv=0xb7e0f8) returned 92 [0151.447] GetTextExtentPoint32W (in: hdc=0xd010694, lpString="0", c=1, psizl=0x297186c | out: psizl=0x297186c) returned 1 [0151.447] DeleteObject (ho=0x460a0582) returned 1 [0151.447] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.447] AdjustWindowRectEx (in: lpRect=0xb7e218, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e218) returned 1 [0151.447] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.447] AdjustWindowRectEx (in: lpRect=0xb7e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e130) returned 1 [0151.447] GdipGetFamilyName (in: family=0x5004738, name=0xb7e0fc, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0151.447] GetDeviceCaps (hdc=0xd010694, index=90) returned 96 [0151.447] CoTaskMemAlloc (cb=0x5c) returned 0xd7dd88 [0151.447] CreateFontIndirectW (lplf=0xd7dd88) returned 0x470a0582 [0151.447] CoTaskMemFree (pv=0xd7dd88) [0151.447] GetObjectW (in: h=0x470a0582, c=92, pv=0xb7e0c4 | out: pv=0xb7e0c4) returned 92 [0151.447] GetTextExtentPoint32W (in: hdc=0xd010694, lpString="0", c=1, psizl=0x2971b1c | out: psizl=0x2971b1c) returned 1 [0151.447] DeleteObject (ho=0x470a0582) returned 1 [0151.447] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.447] AdjustWindowRectEx (in: lpRect=0xb7e264, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e264) returned 1 [0151.448] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.448] AdjustWindowRectEx (in: lpRect=0xb7e130, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e130) returned 1 [0151.448] GdipGetFamilyName (in: family=0x5004738, name=0xb7e0fc, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0151.448] GetDeviceCaps (hdc=0xd010694, index=90) returned 96 [0151.448] CoTaskMemAlloc (cb=0x5c) returned 0xd7df28 [0151.448] CreateFontIndirectW (lplf=0xd7df28) returned 0x480a0582 [0151.448] CoTaskMemFree (pv=0xd7df28) [0151.448] GetObjectW (in: h=0x480a0582, c=92, pv=0xb7e0c4 | out: pv=0xb7e0c4) returned 92 [0151.448] GetTextExtentPoint32W (in: hdc=0xd010694, lpString="0", c=1, psizl=0x2971d78 | out: psizl=0x2971d78) returned 1 [0151.448] DeleteObject (ho=0x480a0582) returned 1 [0151.449] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.449] AdjustWindowRectEx (in: lpRect=0xb7e120, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e120) returned 1 [0151.449] DrawTextExW (in: hdc=0xd010694, lpchText="https://www.youtube.com/watch?v=Ji9IwPId5Uk", cchText=43, lprc=0xb7e10c, format=0x2400, lpdtp=0x297250c | out: lpchText="https://www.youtube.com/watch?v=Ji9IwPId5Uk", lprc=0xb7e10c) returned 13 [0151.449] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.449] AdjustWindowRectEx (in: lpRect=0xb7e1d4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e1d4) returned 1 [0151.449] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.449] AdjustWindowRectEx (in: lpRect=0xb7e284, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e284) returned 1 [0151.450] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.450] AdjustWindowRectEx (in: lpRect=0xb7e284, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e284) returned 1 [0151.450] GetCurrentThreadId () returned 0x77c [0151.450] GetCurrentThreadId () returned 0x77c [0151.451] GetCurrentThreadId () returned 0x77c [0151.451] GetCurrentThreadId () returned 0x77c [0151.451] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.451] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e2b0) returned 1 [0151.451] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.452] AdjustWindowRectEx (in: lpRect=0xb7e2b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e2b0) returned 1 [0151.452] GetDC (hWnd=0x0) returned 0x8010579 [0151.452] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e1f0) returned 0x0 [0151.452] GdipGetFontHeight (font=0x28bef18, graphics=0x50186d8, height=0xb7e1e8) returned 0x0 [0151.452] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.452] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.452] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.452] AdjustWindowRectEx (in: lpRect=0xb7e164, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e164) returned 1 [0151.452] GdipGetFamilyName (in: family=0x5004738, name=0xb7e130, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0151.452] GetDeviceCaps (hdc=0xd010694, index=90) returned 96 [0151.452] CoTaskMemAlloc (cb=0x5c) returned 0xd7df28 [0151.452] CreateFontIndirectW (lplf=0xd7df28) returned 0x490a0582 [0151.452] CoTaskMemFree (pv=0xd7df28) [0151.452] GetObjectW (in: h=0x490a0582, c=92, pv=0xb7e0f8 | out: pv=0xb7e0f8) returned 92 [0151.452] GetTextExtentPoint32W (in: hdc=0xd010694, lpString="0", c=1, psizl=0x2972c24 | out: psizl=0x2972c24) returned 1 [0151.452] DeleteObject (ho=0x490a0582) returned 1 [0151.452] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.452] AdjustWindowRectEx (in: lpRect=0xb7e238, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e238) returned 1 [0151.452] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.452] AdjustWindowRectEx (in: lpRect=0xb7e150, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e150) returned 1 [0151.452] GdipGetFamilyName (in: family=0x5004738, name=0xb7e11c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0151.453] GetDeviceCaps (hdc=0xd010694, index=90) returned 96 [0151.453] CoTaskMemAlloc (cb=0x5c) returned 0xd7e130 [0151.453] CreateFontIndirectW (lplf=0xd7e130) returned 0x4a0a0582 [0151.453] CoTaskMemFree (pv=0xd7e130) [0151.453] GetObjectW (in: h=0x4a0a0582, c=92, pv=0xb7e0e4 | out: pv=0xb7e0e4) returned 92 [0151.453] GetTextExtentPoint32W (in: hdc=0xd010694, lpString="0", c=1, psizl=0x2972ef4 | out: psizl=0x2972ef4) returned 1 [0151.453] DeleteObject (ho=0x4a0a0582) returned 1 [0151.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.453] AdjustWindowRectEx (in: lpRect=0xb7e284, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e284) returned 1 [0151.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.453] AdjustWindowRectEx (in: lpRect=0xb7e150, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e150) returned 1 [0151.453] GdipGetFamilyName (in: family=0x5004738, name=0xb7e11c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0151.453] GetDeviceCaps (hdc=0xd010694, index=90) returned 96 [0151.453] CoTaskMemAlloc (cb=0x5c) returned 0xd7dd20 [0151.453] CreateFontIndirectW (lplf=0xd7dd20) returned 0x4b0a0582 [0151.453] CoTaskMemFree (pv=0xd7dd20) [0151.453] GetObjectW (in: h=0x4b0a0582, c=92, pv=0xb7e0e4 | out: pv=0xb7e0e4) returned 92 [0151.453] GetTextExtentPoint32W (in: hdc=0xd010694, lpString="0", c=1, psizl=0x2973140 | out: psizl=0x2973140) returned 1 [0151.453] DeleteObject (ho=0x4b0a0582) returned 1 [0151.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.454] AdjustWindowRectEx (in: lpRect=0xb7e12c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e12c) returned 1 [0151.454] DrawTextExW (in: hdc=0xd010694, lpchText="Enter the key:", cchText=14, lprc=0xb7e118, format=0x2400, lpdtp=0x29731cc | out: lpchText="Enter the key:", lprc=0xb7e118) returned 13 [0151.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.454] AdjustWindowRectEx (in: lpRect=0xb7e200, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e200) returned 1 [0151.454] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0xb7e300) returned 0x0 [0151.454] GdipCreateFont (fontFamily=0x5004738, emSize=0x41040000, style=2, unit=0x3, font=0x2973238) returned 0x0 [0151.454] GdipGetFontSize (font=0x28bef40, size=0x297323c) returned 0x0 [0151.454] GetDC (hWnd=0x0) returned 0x8010579 [0151.454] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e2c0) returned 0x0 [0151.454] GdipGetFontHeight (font=0x28bef40, graphics=0x50186d8, height=0xb7e2b8) returned 0x0 [0151.454] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.454] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.454] GetDC (hWnd=0x0) returned 0x8010579 [0151.454] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e258) returned 0x0 [0151.454] GdipGetFontHeight (font=0x28bef40, graphics=0x50186d8, height=0xb7e250) returned 0x0 [0151.454] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.454] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.454] GetSystemMetrics (nIndex=5) returned 1 [0151.454] GetSystemMetrics (nIndex=6) returned 1 [0151.454] GetSystemMetrics (nIndex=5) returned 1 [0151.454] GetSystemMetrics (nIndex=6) returned 1 [0151.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.454] AdjustWindowRectEx (in: lpRect=0xb7e288, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e288) returned 1 [0151.455] GetSystemMetrics (nIndex=5) returned 1 [0151.455] GetSystemMetrics (nIndex=6) returned 1 [0151.455] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.455] AdjustWindowRectEx (in: lpRect=0xb7e288, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e288) returned 1 [0151.455] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.455] AdjustWindowRectEx (in: lpRect=0xb7e288, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e288) returned 1 [0151.455] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.455] AdjustWindowRectEx (in: lpRect=0xb7e288, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e288) returned 1 [0151.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe.config", nBufferLength=0x105, lpBuffer=0xb7dbcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe.config", lpFilePart=0x0) returned 0x32 [0151.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb7e080) returned 1 [0151.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe.config" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe.config"), fInfoLevelId=0x0, lpFileInformation=0xb7e0fc | out: lpFileInformation=0xb7e0fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb7e07c) returned 1 [0151.559] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.559] AdjustWindowRectEx (in: lpRect=0xb7e2e4, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xb7e2e4) returned 1 [0151.559] GetSystemMetrics (nIndex=59) returned 1456 [0151.559] GetSystemMetrics (nIndex=60) returned 916 [0151.559] GetSystemMetrics (nIndex=34) returned 140 [0151.559] GetSystemMetrics (nIndex=35) returned 39 [0151.559] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.559] AdjustWindowRectEx (in: lpRect=0xb7e1e4, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xb7e1e4) returned 1 [0151.559] GetCurrentThreadId () returned 0x77c [0151.559] GetCurrentThreadId () returned 0x77c [0151.559] GetCurrentThreadId () returned 0x77c [0151.559] GetCurrentThreadId () returned 0x77c [0151.559] GetCurrentThreadId () returned 0x77c [0151.559] GetCurrentThreadId () returned 0x77c [0151.559] GetCurrentThreadId () returned 0x77c [0151.559] GetCurrentThreadId () returned 0x77c [0151.559] GetCurrentThreadId () returned 0x77c [0151.559] GetCurrentThreadId () returned 0x77c [0151.559] GetCurrentThreadId () returned 0x77c [0151.559] GetCurrentThreadId () returned 0x77c [0151.559] GetCurrentThreadId () returned 0x77c [0151.559] GetCurrentThreadId () returned 0x77c [0151.560] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.560] AdjustWindowRectEx (in: lpRect=0xb7e1e4, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xb7e1e4) returned 1 [0151.560] AdjustWindowRectEx (in: lpRect=0xb7e2bc, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xb7e2bc) returned 1 [0151.560] GetSystemMetrics (nIndex=59) returned 1456 [0151.560] GetSystemMetrics (nIndex=60) returned 916 [0151.560] GetSystemMetrics (nIndex=34) returned 140 [0151.560] GetSystemMetrics (nIndex=35) returned 39 [0151.560] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.560] AdjustWindowRectEx (in: lpRect=0xb7e0f0, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xb7e0f0) returned 1 [0151.560] AdjustWindowRectEx (in: lpRect=0xb7e1bc, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xb7e1bc) returned 1 [0151.560] CreateCompatibleDC (hdc=0x0) returned 0x4c010582 [0151.560] GetDC (hWnd=0x0) returned 0x8010579 [0151.561] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e138) returned 0x0 [0151.561] CoTaskMemAlloc (cb=0x5c) returned 0xd7df28 [0151.561] GdipGetLogFontW (font=0x28bef18, graphics=0x50186d8, logfontW=0xd7df28) returned 0x0 [0151.561] CoTaskMemFree (pv=0xd7df28) [0151.561] CoTaskMemAlloc (cb=0x5c) returned 0xd7dbe8 [0151.561] CoTaskMemFree (pv=0xd7dbe8) [0151.561] CoTaskMemAlloc (cb=0x5c) returned 0xd7de58 [0151.561] CoTaskMemFree (pv=0xd7de58) [0151.561] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.561] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.561] CoTaskMemAlloc (cb=0x5c) returned 0xd7e130 [0151.561] CreateFontIndirectW (lplf=0xd7e130) returned 0x20a0583 [0151.562] CoTaskMemFree (pv=0xd7e130) [0151.562] SelectObject (hdc=0x4c010582, h=0x20a0583) returned 0x18a0048 [0151.562] GetTextMetricsW (in: hdc=0x4c010582, lptm=0xb7e248 | out: lptm=0xb7e248) returned 1 [0151.562] GetTextExtentPoint32W (in: hdc=0x4c010582, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x2976538 | out: psizl=0x2976538) returned 1 [0151.562] SelectObject (hdc=0x4c010582, h=0x18a0048) returned 0x20a0583 [0151.562] DeleteDC (hdc=0x4c010582) returned 1 [0151.563] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.563] AdjustWindowRectEx (in: lpRect=0xb7e248, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e248) returned 1 [0151.563] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.563] AdjustWindowRectEx (in: lpRect=0xb7e098, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e098) returned 1 [0151.563] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.563] AdjustWindowRectEx (in: lpRect=0xb7e054, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e054) returned 1 [0151.563] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.563] AdjustWindowRectEx (in: lpRect=0xb7e1f4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e1f4) returned 1 [0151.563] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.563] AdjustWindowRectEx (in: lpRect=0xb7e044, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e044) returned 1 [0151.564] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.564] AdjustWindowRectEx (in: lpRect=0xb7dfd4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7dfd4) returned 1 [0151.564] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.564] AdjustWindowRectEx (in: lpRect=0xb7e1f4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e1f4) returned 1 [0151.564] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.564] AdjustWindowRectEx (in: lpRect=0xb7e044, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e044) returned 1 [0151.564] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.564] AdjustWindowRectEx (in: lpRect=0xb7e000, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e000) returned 1 [0151.564] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.564] AdjustWindowRectEx (in: lpRect=0xb7e248, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e248) returned 1 [0151.564] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.564] AdjustWindowRectEx (in: lpRect=0xb7e098, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e098) returned 1 [0151.564] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.564] AdjustWindowRectEx (in: lpRect=0xb7e054, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e054) returned 1 [0151.564] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.564] AdjustWindowRectEx (in: lpRect=0xb7e1f4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e1f4) returned 1 [0151.565] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.565] AdjustWindowRectEx (in: lpRect=0xb7e044, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e044) returned 1 [0151.565] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.565] AdjustWindowRectEx (in: lpRect=0xb7dea0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7dea0) returned 1 [0151.565] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.565] AdjustWindowRectEx (in: lpRect=0xb7dfd4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7dfd4) returned 1 [0151.565] GetDC (hWnd=0x0) returned 0x8010579 [0151.565] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7deac) returned 0x0 [0151.565] GdipGetFontHeight (font=0x28bef18, graphics=0x50186d8, height=0xb7dea4) returned 0x0 [0151.565] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.565] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.565] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.565] AdjustWindowRectEx (in: lpRect=0xb7e1f4, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e1f4) returned 1 [0151.565] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.565] AdjustWindowRectEx (in: lpRect=0xb7e044, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e044) returned 1 [0151.565] GetSystemMetrics (nIndex=5) returned 1 [0151.565] GetSystemMetrics (nIndex=6) returned 1 [0151.566] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.566] AdjustWindowRectEx (in: lpRect=0xb7dfd8, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7dfd8) returned 1 [0151.566] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.566] AdjustWindowRectEx (in: lpRect=0xb7e248, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e248) returned 1 [0151.566] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.566] AdjustWindowRectEx (in: lpRect=0xb7e098, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e098) returned 1 [0151.566] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.566] AdjustWindowRectEx (in: lpRect=0xb7e054, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e054) returned 1 [0151.566] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.566] AdjustWindowRectEx (in: lpRect=0xb7e1f4, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e1f4) returned 1 [0151.566] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.566] AdjustWindowRectEx (in: lpRect=0xb7e044, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e044) returned 1 [0151.567] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.567] AdjustWindowRectEx (in: lpRect=0xb7dfd8, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7dfd8) returned 1 [0151.567] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.567] AdjustWindowRectEx (in: lpRect=0xb7e248, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e248) returned 1 [0151.567] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.567] AdjustWindowRectEx (in: lpRect=0xb7e098, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e098) returned 1 [0151.567] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.567] AdjustWindowRectEx (in: lpRect=0xb7e054, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e054) returned 1 [0151.567] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.567] AdjustWindowRectEx (in: lpRect=0xb7e1f4, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e1f4) returned 1 [0151.567] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.567] AdjustWindowRectEx (in: lpRect=0xb7e044, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e044) returned 1 [0151.567] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.567] AdjustWindowRectEx (in: lpRect=0xb7e000, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e000) returned 1 [0151.568] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.568] AdjustWindowRectEx (in: lpRect=0xb7e1f4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e1f4) returned 1 [0151.568] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.568] AdjustWindowRectEx (in: lpRect=0xb7e044, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e044) returned 1 [0151.568] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.568] AdjustWindowRectEx (in: lpRect=0xb7de80, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7de80) returned 1 [0151.568] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.568] AdjustWindowRectEx (in: lpRect=0xb7dfb4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7dfb4) returned 1 [0151.568] GetDC (hWnd=0x0) returned 0x8010579 [0151.568] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7de8c) returned 0x0 [0151.568] GdipGetFontHeight (font=0x28bef18, graphics=0x50186d8, height=0xb7de84) returned 0x0 [0151.568] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.568] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.568] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.568] AdjustWindowRectEx (in: lpRect=0xb7e1f4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e1f4) returned 1 [0151.568] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.568] AdjustWindowRectEx (in: lpRect=0xb7e044, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e044) returned 1 [0151.569] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.569] AdjustWindowRectEx (in: lpRect=0xb7dfd4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7dfd4) returned 1 [0151.569] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.569] AdjustWindowRectEx (in: lpRect=0xb7e248, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e248) returned 1 [0151.569] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.569] AdjustWindowRectEx (in: lpRect=0xb7e098, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e098) returned 1 [0151.569] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.569] AdjustWindowRectEx (in: lpRect=0xb7e054, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb7e054) returned 1 [0151.569] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.569] AdjustWindowRectEx (in: lpRect=0xb7e1f4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e1f4) returned 1 [0151.569] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.569] AdjustWindowRectEx (in: lpRect=0xb7e044, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e044) returned 1 [0151.569] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.569] AdjustWindowRectEx (in: lpRect=0xb7dea0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7dea0) returned 1 [0151.570] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.570] AdjustWindowRectEx (in: lpRect=0xb7dfd4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7dfd4) returned 1 [0151.570] GetDC (hWnd=0x0) returned 0x8010579 [0151.570] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7deac) returned 0x0 [0151.570] GdipGetFontHeight (font=0x28bef18, graphics=0x50186d8, height=0xb7dea4) returned 0x0 [0151.570] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.570] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.570] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.570] AdjustWindowRectEx (in: lpRect=0xb7e1f4, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e1f4) returned 1 [0151.570] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.570] AdjustWindowRectEx (in: lpRect=0xb7e044, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7e044) returned 1 [0151.570] GetSystemMetrics (nIndex=5) returned 1 [0151.570] GetSystemMetrics (nIndex=6) returned 1 [0151.570] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.570] AdjustWindowRectEx (in: lpRect=0xb7dfd8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb7dfd8) returned 1 [0151.570] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.570] AdjustWindowRectEx (in: lpRect=0xb7df80, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0xb7df80) returned 1 [0151.570] AdjustWindowRectEx (in: lpRect=0xb7e1bc, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0xb7e1bc) returned 1 [0151.571] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.571] AdjustWindowRectEx (in: lpRect=0xb7def0, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0xb7def0) returned 1 [0151.571] AdjustWindowRectEx (in: lpRect=0xb7dfe0, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0xb7dfe0) returned 1 [0151.571] GetSystemMetrics (nIndex=59) returned 1456 [0151.571] GetSystemMetrics (nIndex=60) returned 916 [0151.571] GetSystemMetrics (nIndex=34) returned 140 [0151.571] GetSystemMetrics (nIndex=35) returned 39 [0151.571] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.571] AdjustWindowRectEx (in: lpRect=0xb7de88, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0xb7de88) returned 1 [0151.571] AdjustWindowRectEx (in: lpRect=0xb7df54, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0xb7df54) returned 1 [0151.571] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.571] AdjustWindowRectEx (in: lpRect=0xb7e1b4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e1b4) returned 1 [0151.571] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.571] AdjustWindowRectEx (in: lpRect=0xb7e004, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e004) returned 1 [0151.571] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.571] AdjustWindowRectEx (in: lpRect=0xb7dfc0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7dfc0) returned 1 [0151.571] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.571] AdjustWindowRectEx (in: lpRect=0xb7e1b4, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e1b4) returned 1 [0151.572] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.572] AdjustWindowRectEx (in: lpRect=0xb7e004, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e004) returned 1 [0151.572] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.572] AdjustWindowRectEx (in: lpRect=0xb7dfc0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7dfc0) returned 1 [0151.572] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.572] AdjustWindowRectEx (in: lpRect=0xb7eb58, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0xb7eb58) returned 1 [0151.572] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.572] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName="#Lime Decryptor", dwStyle=0x2c80000, X=-2147483648, Y=-2147483648, nWidth=754, nHeight=480, hWndParent=0x0, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101a0 [0151.572] SetWindowLongW (hWnd=0x101a0, nIndex=-4, dwNewLong=1960951274) returned 81790438 [0151.573] GetWindowLongW (hWnd=0x101a0, nIndex=-4) returned 1960951274 [0151.573] SetWindowLongW (hWnd=0x101a0, nIndex=-4, dwNewLong=81790598) returned 1960951274 [0151.573] GetWindowLongW (hWnd=0x101a0, nIndex=-4) returned 81790598 [0151.573] GetWindowLongW (hWnd=0x101a0, nIndex=-16) returned 113770496 [0151.573] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x81, wParam=0x0, lParam=0xb7e638) returned 0x1 [0151.573] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x83, wParam=0x0, lParam=0xb7e624) returned 0x0 [0151.574] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x1, wParam=0x0, lParam=0xb7e638) returned 0x0 [0151.574] GetClientRect (in: hWnd=0x101a0, lpRect=0xb7e34c | out: lpRect=0xb7e34c) returned 1 [0151.574] GetWindowRect (in: hWnd=0x101a0, lpRect=0xb7e34c | out: lpRect=0xb7e34c) returned 1 [0151.574] SetWindowTextW (hWnd=0x101a0, lpString="#Lime Decryptor") returned 1 [0151.574] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xc, wParam=0x0, lParam=0x296a480) returned 0x1 [0151.574] GetStartupInfoW (in: lpStartupInfo=0x2977c00 | out: lpStartupInfo=0x2977c00*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0151.575] GetParent (hWnd=0x101a0) returned 0x0 [0151.575] SetWindowLongW (hWnd=0x101a0, nIndex=-8, dwNewLong=0) returned 0 [0151.575] SendMessageW (hWnd=0x101a0, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0151.575] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0151.575] SendMessageW (hWnd=0x101a0, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0151.575] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0151.575] GetSystemMenu (hWnd=0x101a0, bRevert=0) returned 0x70189 [0151.576] GetWindowPlacement (in: hWnd=0x101a0, lpwndpl=0xb7ec0c | out: lpwndpl=0xb7ec0c) returned 1 [0151.577] EnableMenuItem (hMenu=0x70189, uIDEnableItem=0xf020, uEnable=0x1) returned 0 [0151.577] EnableMenuItem (hMenu=0x70189, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0151.577] EnableMenuItem (hMenu=0x70189, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0151.577] EnableMenuItem (hMenu=0x70189, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0151.577] EnableMenuItem (hMenu=0x70189, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0151.577] GetClientRect (in: hWnd=0x101a0, lpRect=0xb7ec50 | out: lpRect=0xb7ec50) returned 1 [0151.577] GetClientRect (in: hWnd=0x101a0, lpRect=0xb7ebb0 | out: lpRect=0xb7ebb0) returned 1 [0151.577] GetWindowRect (in: hWnd=0x101a0, lpRect=0xb7ebb0 | out: lpRect=0xb7ebb0) returned 1 [0151.577] SetWindowPos (hWnd=0x101a0, hWndInsertAfter=0xffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0151.577] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x46, wParam=0x0, lParam=0xb7ebcc) returned 0x0 [0151.577] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x46, wParam=0x0, lParam=0xb7ebcc) returned 0x0 [0151.578] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0151.578] NtdllDefWindowProc_W (hWnd=0x1019c, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0151.578] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0151.578] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0151.578] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0151.578] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0151.578] OleInitialize (pvReserved=0x0) returned 0x0 [0151.579] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0xb7e974 | out: lplpMessageFilter=0xb7e974*=0x0) returned 0x0 [0151.581] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0151.583] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0151.583] GetParent (hWnd=0x101a0) returned 0x0 [0151.583] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0151.583] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0151.583] GetWindowPlacement (in: hWnd=0x101a0, lpwndpl=0xb7e960 | out: lpwndpl=0xb7e960) returned 1 [0151.583] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x47, wParam=0x0, lParam=0xb7ebcc) returned 0x0 [0151.583] GetClientRect (in: hWnd=0x101a0, lpRect=0xb7e910 | out: lpRect=0xb7e910) returned 1 [0151.583] GetWindowRect (in: hWnd=0x101a0, lpRect=0xb7e910 | out: lpRect=0xb7e910) returned 1 [0151.583] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0151.583] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0151.583] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0151.584] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.584] GetWindowLongW (hWnd=0x101a0, nIndex=-16) returned 113770496 [0151.584] GetWindowTextLengthW (hWnd=0x101a0) returned 15 [0151.584] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0151.584] GetSystemMetrics (nIndex=42) returned 0 [0151.584] GetWindowTextW (in: hWnd=0x101a0, lpString=0xb7eb40, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0151.584] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xd, wParam=0x10, lParam=0xb7eb40) returned 0xf [0151.584] GetWindowTextLengthW (hWnd=0x101a0) returned 15 [0151.584] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0151.584] GetSystemMetrics (nIndex=42) returned 0 [0151.584] GetWindowTextW (in: hWnd=0x101a0, lpString=0xb7eb40, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0151.584] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xd, wParam=0x10, lParam=0xb7eb40) returned 0xf [0151.584] GetWindowLongW (hWnd=0x101a0, nIndex=-16) returned 113770496 [0151.584] GetWindowLongW (hWnd=0x101a0, nIndex=-20) returned 327945 [0151.584] SetWindowLongW (hWnd=0x101a0, nIndex=-16, dwNewLong=46661632) returned 113770496 [0151.584] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7c, wParam=0xfffffff0, lParam=0xb7ebb4) returned 0x0 [0151.585] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7d, wParam=0xfffffff0, lParam=0xb7ebb4) returned 0x0 [0151.585] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0151.585] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0151.585] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0151.585] SetWindowLongW (hWnd=0x101a0, nIndex=-20, dwNewLong=327681) returned 327945 [0151.585] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7c, wParam=0xffffffec, lParam=0xb7ebb4) returned 0x0 [0151.585] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7d, wParam=0xffffffec, lParam=0xb7ebb4) returned 0x0 [0151.585] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0151.585] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0151.585] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0151.585] SetWindowPos (hWnd=0x101a0, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0151.585] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x46, wParam=0x0, lParam=0xb7ebc8) returned 0x0 [0151.585] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x83, wParam=0x1, lParam=0xb7eba0) returned 0x0 [0151.586] GetWindowPlacement (in: hWnd=0x101a0, lpwndpl=0xb7e95c | out: lpwndpl=0xb7e95c) returned 1 [0151.586] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x47, wParam=0x0, lParam=0xb7ebc8) returned 0x0 [0151.586] GetClientRect (in: hWnd=0x101a0, lpRect=0xb7e90c | out: lpRect=0xb7e90c) returned 1 [0151.586] GetWindowRect (in: hWnd=0x101a0, lpRect=0xb7e90c | out: lpRect=0xb7e90c) returned 1 [0151.586] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0151.586] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0151.586] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0151.586] RedrawWindow (hWnd=0x101a0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.586] GetSystemMenu (hWnd=0x101a0, bRevert=0) returned 0x70189 [0151.586] GetWindowPlacement (in: hWnd=0x101a0, lpwndpl=0xb7ebfc | out: lpwndpl=0xb7ebfc) returned 1 [0151.586] EnableMenuItem (hMenu=0x70189, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0151.586] EnableMenuItem (hMenu=0x70189, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0151.586] EnableMenuItem (hMenu=0x70189, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0151.586] EnableMenuItem (hMenu=0x70189, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0151.586] EnableMenuItem (hMenu=0x70189, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0151.586] ShowWindow (hWnd=0x101a0, nCmdShow=5) returned 0 [0151.586] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.587] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.587] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.587] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName="Decrypt", dwStyle=0x56000000, X=14, Y=285, nWidth=711, nHeight=60, hWndParent=0x101a0, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101a4 [0151.587] SetWindowLongW (hWnd=0x101a4, nIndex=-4, dwNewLong=1960951274) returned 81790438 [0151.587] GetWindowLongW (hWnd=0x101a4, nIndex=-4) returned 1960951274 [0151.587] SetWindowLongW (hWnd=0x101a4, nIndex=-4, dwNewLong=81790638) returned 1960951274 [0151.587] GetWindowLongW (hWnd=0x101a4, nIndex=-4) returned 81790638 [0151.587] GetWindowLongW (hWnd=0x101a4, nIndex=-16) returned 1174405120 [0151.587] GetWindowLongW (hWnd=0x101a4, nIndex=-12) returned 0 [0151.587] SetWindowLongW (hWnd=0x101a4, nIndex=-12, dwNewLong=65956) returned 0 [0151.587] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x81, wParam=0x0, lParam=0xb7e2e0) returned 0x1 [0151.587] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x83, wParam=0x0, lParam=0xb7e2cc) returned 0x0 [0151.587] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x1, wParam=0x0, lParam=0xb7e2e0) returned 0x0 [0151.588] GetWindow (hWnd=0x101a4, uCmd=0x3) returned 0x0 [0151.588] GetClientRect (in: hWnd=0x101a4, lpRect=0xb7e020 | out: lpRect=0xb7e020) returned 1 [0151.588] GetWindowRect (in: hWnd=0x101a4, lpRect=0xb7e020 | out: lpRect=0xb7e020) returned 1 [0151.588] GetParent (hWnd=0x101a4) returned 0x101a0 [0151.588] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7e020, cPoints=0x2 | out: lpPoints=0xb7e020) returned -3342365 [0151.588] SetWindowTextW (hWnd=0x101a4, lpString="Decrypt") returned 1 [0151.588] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0xc, wParam=0x0, lParam=0x2969e68) returned 0x1 [0151.588] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x5, wParam=0x0, lParam=0x3c02c7) returned 0x0 [0151.588] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x3, wParam=0x0, lParam=0x11d000e) returned 0x0 [0151.588] GetClientRect (in: hWnd=0x101a4, lpRect=0xb7e07c | out: lpRect=0xb7e07c) returned 1 [0151.588] GetWindowRect (in: hWnd=0x101a4, lpRect=0xb7e07c | out: lpRect=0xb7e07c) returned 1 [0151.588] GetParent (hWnd=0x101a4) returned 0x101a0 [0151.588] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7e07c, cPoints=0x2 | out: lpPoints=0xb7e07c) returned -3342365 [0151.589] SendMessageW (hWnd=0x101a4, Msg=0x2210, wParam=0x1a40001, lParam=0x101a4) returned 0x0 [0151.589] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x2210, wParam=0x1a40001, lParam=0x101a4) returned 0x0 [0151.589] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.589] GetParent (hWnd=0x101a4) returned 0x101a0 [0151.589] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.589] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x29781e0 | out: lpWndClass=0x29781e0) returned 1 [0151.589] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.590] CoTaskMemAlloc (cb=0x58) returned 0xdb0d10 [0151.590] RegisterClassW (lpWndClass=0xb7e724) returned 0xc138 [0151.590] CoTaskMemFree (pv=0xdb0d10) [0151.590] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.590] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.2bf8098_r11_ad1", lpWindowName="Enter the key:", dwStyle=0x5600000d, X=6, Y=14, nWidth=73, nHeight=13, hWndParent=0x101a4, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101a6 [0151.590] SetWindowLongW (hWnd=0x101a6, nIndex=-4, dwNewLong=2002172128) returned 81790678 [0151.590] GetWindowLongW (hWnd=0x101a6, nIndex=-4) returned 2002172128 [0151.590] SetWindowLongW (hWnd=0x101a6, nIndex=-4, dwNewLong=81790718) returned 2002172128 [0151.590] GetWindowLongW (hWnd=0x101a6, nIndex=-4) returned 81790718 [0151.590] GetWindowLongW (hWnd=0x101a6, nIndex=-16) returned 1174405133 [0151.590] GetWindowLongW (hWnd=0x101a6, nIndex=-12) returned 0 [0151.590] SetWindowLongW (hWnd=0x101a6, nIndex=-12, dwNewLong=65958) returned 0 [0151.590] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0x81, wParam=0x0, lParam=0xb7e2a8) returned 0x1 [0151.591] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0x83, wParam=0x0, lParam=0xb7e294) returned 0x0 [0151.591] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0x1, wParam=0x0, lParam=0xb7e2a8) returned 0x0 [0151.591] GetWindow (hWnd=0x101a6, uCmd=0x3) returned 0x0 [0151.591] GetClientRect (in: hWnd=0x101a6, lpRect=0xb7dfb8 | out: lpRect=0xb7dfb8) returned 1 [0151.591] GetWindowRect (in: hWnd=0x101a6, lpRect=0xb7dfb8 | out: lpRect=0xb7dfb8) returned 1 [0151.591] GetParent (hWnd=0x101a6) returned 0x101a4 [0151.591] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a4, lpPoints=0xb7dfb8, cPoints=0x2 | out: lpPoints=0xb7dfb8) returned -22020139 [0151.591] SetWindowTextW (hWnd=0x101a6, lpString="Enter the key:") returned 1 [0151.591] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0xc, wParam=0x0, lParam=0x296a3ac) returned 0x1 [0151.591] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0x5, wParam=0x0, lParam=0xd0049) returned 0x0 [0151.591] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0x3, wParam=0x0, lParam=0xe0006) returned 0x0 [0151.591] GetClientRect (in: hWnd=0x101a6, lpRect=0xb7e014 | out: lpRect=0xb7e014) returned 1 [0151.591] GetWindowRect (in: hWnd=0x101a6, lpRect=0xb7e014 | out: lpRect=0xb7e014) returned 1 [0151.591] GetParent (hWnd=0x101a6) returned 0x101a4 [0151.591] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a4, lpPoints=0xb7e014, cPoints=0x2 | out: lpPoints=0xb7e014) returned -22020139 [0151.591] SendMessageW (hWnd=0x101a6, Msg=0x2210, wParam=0x1a60001, lParam=0x101a6) returned 0x0 [0151.591] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0x2210, wParam=0x1a60001, lParam=0x101a6) returned 0x0 [0151.591] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.592] GetParent (hWnd=0x101a6) returned 0x101a4 [0151.592] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.592] GetClassInfoW (in: hInstance=0x0, lpClassName="EDIT", lpWndClass=0x29784f0 | out: lpWndClass=0x29784f0) returned 1 [0151.592] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.592] CoTaskMemAlloc (cb=0x54) returned 0xdb0fb0 [0151.592] RegisterClassW (lpWndClass=0xb7e704) returned 0xc139 [0151.592] CoTaskMemFree (pv=0xdb0fb0) [0151.592] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.592] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.2bf8098_r11_ad1", lpWindowName="Key", dwStyle=0x560100c0, X=6, Y=32, nWidth=699, nHeight=20, hWndParent=0x101a4, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101a8 [0151.592] SetWindowLongW (hWnd=0x101a8, nIndex=-4, dwNewLong=2002172032) returned 81790758 [0151.592] GetWindowLongW (hWnd=0x101a8, nIndex=-4) returned 2002172032 [0151.593] SetWindowLongW (hWnd=0x101a8, nIndex=-4, dwNewLong=81790798) returned 2002172032 [0151.593] GetWindowLongW (hWnd=0x101a8, nIndex=-4) returned 81790798 [0151.593] GetWindowLongW (hWnd=0x101a8, nIndex=-16) returned 1174470848 [0151.593] GetWindowLongW (hWnd=0x101a8, nIndex=-12) returned 0 [0151.593] SetWindowLongW (hWnd=0x101a8, nIndex=-12, dwNewLong=65960) returned 0 [0151.593] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x81, wParam=0x0, lParam=0xb7e288) returned 0x1 [0151.593] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x83, wParam=0x0, lParam=0xb7e274) returned 0x0 [0151.593] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x1, wParam=0x0, lParam=0xb7e288) returned 0x1 [0151.593] SendMessageW (hWnd=0x101a8, Msg=0x2111, wParam=0x40001a8, lParam=0x101a8) returned 0x0 [0151.593] SendMessageW (hWnd=0x101a8, Msg=0x2111, wParam=0x30001a8, lParam=0x101a8) returned 0x0 [0151.593] GetWindow (hWnd=0x101a8, uCmd=0x3) returned 0x101a6 [0151.593] GetClientRect (in: hWnd=0x101a8, lpRect=0xb7dfac | out: lpRect=0xb7dfac) returned 1 [0151.594] GetWindowRect (in: hWnd=0x101a8, lpRect=0xb7dfac | out: lpRect=0xb7dfac) returned 1 [0151.594] GetParent (hWnd=0x101a8) returned 0x101a4 [0151.594] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a4, lpPoints=0xb7dfac, cPoints=0x2 | out: lpPoints=0xb7dfac) returned -22020139 [0151.594] GetDC (hWnd=0x0) returned 0x180106e6 [0151.594] GdipCreateFromHDC (hdc=0x180106e6, graphics=0xb7de54) returned 0x0 [0151.594] CoTaskMemAlloc (cb=0x5c) returned 0xd7dc50 [0151.594] GdipGetLogFontW (font=0x28bef40, graphics=0x50186d8, logfontW=0xd7dc50) returned 0x0 [0151.594] CoTaskMemFree (pv=0xd7dc50) [0151.594] CoTaskMemAlloc (cb=0x5c) returned 0xd7e200 [0151.594] CoTaskMemFree (pv=0xd7e200) [0151.594] CoTaskMemAlloc (cb=0x5c) returned 0xd7e060 [0151.594] CoTaskMemFree (pv=0xd7e060) [0151.594] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.594] ReleaseDC (hWnd=0x0, hDC=0x180106e6) returned 1 [0151.594] CoTaskMemAlloc (cb=0x5c) returned 0xd7df28 [0151.594] CreateFontIndirectW (lplf=0xd7df28) returned 0x570a0582 [0151.594] CoTaskMemFree (pv=0xd7df28) [0151.594] SendMessageW (hWnd=0x101a8, Msg=0x30, wParam=0x570a0582, lParam=0x0) returned 0x1 [0151.594] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x30, wParam=0x570a0582, lParam=0x0) returned 0x1 [0151.595] SendMessageW (hWnd=0x101a8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0151.595] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0151.595] SetWindowTextW (hWnd=0x101a8, lpString="Key") returned 1 [0151.595] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0xc, wParam=0x0, lParam=0x296a3fc) returned 0x1 [0151.595] SendMessageW (hWnd=0x101a8, Msg=0x2111, wParam=0x40001a8, lParam=0x101a8) returned 0x0 [0151.595] SendMessageW (hWnd=0x101a8, Msg=0x2111, wParam=0x30001a8, lParam=0x101a8) returned 0x0 [0151.595] GetSystemMetrics (nIndex=5) returned 1 [0151.595] GetSystemMetrics (nIndex=6) returned 1 [0151.595] SendMessageW (hWnd=0x101a8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0151.595] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0151.595] SendMessageW (hWnd=0x101a8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0151.595] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0151.595] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x5, wParam=0x0, lParam=0x1002b7) returned 0x0 [0151.595] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x3, wParam=0x0, lParam=0x220008) returned 0x0 [0151.595] GetClientRect (in: hWnd=0x101a8, lpRect=0xb7e008 | out: lpRect=0xb7e008) returned 1 [0151.595] GetWindowRect (in: hWnd=0x101a8, lpRect=0xb7e008 | out: lpRect=0xb7e008) returned 1 [0151.595] GetParent (hWnd=0x101a8) returned 0x101a4 [0151.595] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a4, lpPoints=0xb7e008, cPoints=0x2 | out: lpPoints=0xb7e008) returned -22020139 [0151.595] SendMessageW (hWnd=0x101a8, Msg=0x2210, wParam=0x1a80001, lParam=0x101a8) returned 0x0 [0151.595] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x2210, wParam=0x1a80001, lParam=0x101a8) returned 0x0 [0151.595] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.596] GetParent (hWnd=0x101a8) returned 0x101a4 [0151.596] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.596] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.596] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName="How to buy your file ?", dwStyle=0x56000000, X=383, Y=119, nWidth=340, nHeight=94, hWndParent=0x101a0, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101aa [0151.596] SetWindowLongW (hWnd=0x101aa, nIndex=-4, dwNewLong=1960951274) returned 81790438 [0151.596] GetWindowLongW (hWnd=0x101aa, nIndex=-4) returned 1960951274 [0151.596] SetWindowLongW (hWnd=0x101aa, nIndex=-4, dwNewLong=81790838) returned 1960951274 [0151.596] GetWindowLongW (hWnd=0x101aa, nIndex=-4) returned 81790838 [0151.596] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned 1174405120 [0151.596] GetWindowLongW (hWnd=0x101aa, nIndex=-12) returned 0 [0151.596] SetWindowLongW (hWnd=0x101aa, nIndex=-12, dwNewLong=65962) returned 0 [0151.596] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x81, wParam=0x0, lParam=0xb7e2e0) returned 0x1 [0151.597] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x83, wParam=0x0, lParam=0xb7e2cc) returned 0x0 [0151.597] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x1, wParam=0x0, lParam=0xb7e2e0) returned 0x0 [0151.597] GetWindow (hWnd=0x101aa, uCmd=0x3) returned 0x101a4 [0151.597] GetClientRect (in: hWnd=0x101aa, lpRect=0xb7e020 | out: lpRect=0xb7e020) returned 1 [0151.597] GetWindowRect (in: hWnd=0x101aa, lpRect=0xb7e020 | out: lpRect=0xb7e020) returned 1 [0151.597] GetParent (hWnd=0x101aa) returned 0x101a0 [0151.597] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7e020, cPoints=0x2 | out: lpPoints=0xb7e020) returned -3342365 [0151.597] SetWindowTextW (hWnd=0x101aa, lpString="How to buy your file ?") returned 1 [0151.597] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0xc, wParam=0x0, lParam=0x296a140) returned 0x1 [0151.597] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x5, wParam=0x0, lParam=0x5e0154) returned 0x0 [0151.597] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x3, wParam=0x0, lParam=0x77017f) returned 0x0 [0151.597] GetClientRect (in: hWnd=0x101aa, lpRect=0xb7e07c | out: lpRect=0xb7e07c) returned 1 [0151.597] GetWindowRect (in: hWnd=0x101aa, lpRect=0xb7e07c | out: lpRect=0xb7e07c) returned 1 [0151.597] GetParent (hWnd=0x101aa) returned 0x101a0 [0151.597] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7e07c, cPoints=0x2 | out: lpPoints=0xb7e07c) returned -3342365 [0151.597] SendMessageW (hWnd=0x101aa, Msg=0x2210, wParam=0x1aa0001, lParam=0x101aa) returned 0x0 [0151.597] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x2210, wParam=0x1aa0001, lParam=0x101aa) returned 0x0 [0151.597] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.598] GetParent (hWnd=0x101aa) returned 0x101a0 [0151.598] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.598] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x2978a94 | out: lpWndClass=0x2978a94) returned 1 [0151.598] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.598] CoTaskMemAlloc (cb=0x58) returned 0xdb0d70 [0151.598] RegisterClassW (lpWndClass=0xb7e724) returned 0xc13a [0151.598] CoTaskMemFree (pv=0xdb0d70) [0151.598] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.598] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.2bf8098_r11_ad1", lpWindowName="?", dwStyle=0x5601000b, X=306, Y=14, nWidth=26, nHeight=21, hWndParent=0x101aa, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101ac [0151.598] SetWindowLongW (hWnd=0x101ac, nIndex=-4, dwNewLong=2002171904) returned 81790878 [0151.599] GetWindowLongW (hWnd=0x101ac, nIndex=-4) returned 2002171904 [0151.599] SetWindowLongW (hWnd=0x101ac, nIndex=-4, dwNewLong=81790918) returned 2002171904 [0151.599] GetWindowLongW (hWnd=0x101ac, nIndex=-4) returned 81790918 [0151.599] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned 1174470667 [0151.599] GetWindowLongW (hWnd=0x101ac, nIndex=-12) returned 0 [0151.599] SetWindowLongW (hWnd=0x101ac, nIndex=-12, dwNewLong=65964) returned 0 [0151.599] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x81, wParam=0x0, lParam=0xb7e2a8) returned 0x1 [0151.599] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x83, wParam=0x0, lParam=0xb7e294) returned 0x0 [0151.599] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x1, wParam=0x0, lParam=0xb7e2a8) returned 0x0 [0151.599] GetWindow (hWnd=0x101ac, uCmd=0x3) returned 0x0 [0151.599] GetClientRect (in: hWnd=0x101ac, lpRect=0xb7dfac | out: lpRect=0xb7dfac) returned 1 [0151.599] GetWindowRect (in: hWnd=0x101ac, lpRect=0xb7dfac | out: lpRect=0xb7dfac) returned 1 [0151.599] GetParent (hWnd=0x101ac) returned 0x101aa [0151.599] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101aa, lpPoints=0xb7dfac, cPoints=0x2 | out: lpPoints=0xb7dfac) returned -11141532 [0151.599] SetWindowTextW (hWnd=0x101ac, lpString="?") returned 1 [0151.599] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0xc, wParam=0x0, lParam=0x296a1a0) returned 0x1 [0151.600] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x5, wParam=0x0, lParam=0x15001a) returned 0x0 [0151.600] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x3, wParam=0x0, lParam=0xe0132) returned 0x0 [0151.600] GetClientRect (in: hWnd=0x101ac, lpRect=0xb7e008 | out: lpRect=0xb7e008) returned 1 [0151.600] GetWindowRect (in: hWnd=0x101ac, lpRect=0xb7e008 | out: lpRect=0xb7e008) returned 1 [0151.600] GetParent (hWnd=0x101ac) returned 0x101aa [0151.600] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101aa, lpPoints=0xb7e008, cPoints=0x2 | out: lpPoints=0xb7e008) returned -11141532 [0151.600] SendMessageW (hWnd=0x101ac, Msg=0x2210, wParam=0x1ac0001, lParam=0x101ac) returned 0x0 [0151.600] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x2210, wParam=0x1ac0001, lParam=0x101ac) returned 0x0 [0151.600] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.600] GetParent (hWnd=0x101ac) returned 0x101aa [0151.600] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.600] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.600] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.2bf8098_r11_ad1", lpWindowName="https://www.youtube.com/watch?v=Ji9IwPId5Uk", dwStyle=0x5601000d, X=11, Y=44, nWidth=243, nHeight=13, hWndParent=0x101aa, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101ae [0151.600] SetWindowLongW (hWnd=0x101ae, nIndex=-4, dwNewLong=2002172128) returned 81790678 [0151.601] GetWindowLongW (hWnd=0x101ae, nIndex=-4) returned 2002172128 [0151.601] SetWindowLongW (hWnd=0x101ae, nIndex=-4, dwNewLong=81790958) returned 2002172128 [0151.601] GetWindowLongW (hWnd=0x101ae, nIndex=-4) returned 81790958 [0151.601] GetWindowLongW (hWnd=0x101ae, nIndex=-16) returned 1174470669 [0151.601] GetWindowLongW (hWnd=0x101ae, nIndex=-12) returned 0 [0151.601] SetWindowLongW (hWnd=0x101ae, nIndex=-12, dwNewLong=65966) returned 0 [0151.601] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x81, wParam=0x0, lParam=0xb7e2a0) returned 0x1 [0151.601] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x83, wParam=0x0, lParam=0xb7e28c) returned 0x0 [0151.601] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x1, wParam=0x0, lParam=0xb7e2a0) returned 0x0 [0151.601] GetWindow (hWnd=0x101ae, uCmd=0x3) returned 0x101ac [0151.601] GetClientRect (in: hWnd=0x101ae, lpRect=0xb7dfa8 | out: lpRect=0xb7dfa8) returned 1 [0151.601] GetWindowRect (in: hWnd=0x101ae, lpRect=0xb7dfa8 | out: lpRect=0xb7dfa8) returned 1 [0151.601] GetParent (hWnd=0x101ae) returned 0x101aa [0151.601] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101aa, lpPoints=0xb7dfa8, cPoints=0x2 | out: lpPoints=0xb7dfa8) returned -11141532 [0151.601] SetWindowTextW (hWnd=0x101ae, lpString="https://www.youtube.com/watch?v=Ji9IwPId5Uk") returned 1 [0151.601] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0xc, wParam=0x0, lParam=0x296a1d4) returned 0x1 [0151.602] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x5, wParam=0x0, lParam=0xd00f3) returned 0x0 [0151.602] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x3, wParam=0x0, lParam=0x2c000b) returned 0x0 [0151.602] GetClientRect (in: hWnd=0x101ae, lpRect=0xb7e004 | out: lpRect=0xb7e004) returned 1 [0151.602] GetWindowRect (in: hWnd=0x101ae, lpRect=0xb7e004 | out: lpRect=0xb7e004) returned 1 [0151.602] GetParent (hWnd=0x101ae) returned 0x101aa [0151.602] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101aa, lpPoints=0xb7e004, cPoints=0x2 | out: lpPoints=0xb7e004) returned -11141532 [0151.602] SendMessageW (hWnd=0x101ae, Msg=0x2210, wParam=0x1ae0001, lParam=0x101ae) returned 0x0 [0151.602] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x2210, wParam=0x1ae0001, lParam=0x101ae) returned 0x0 [0151.602] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.602] GetParent (hWnd=0x101ae) returned 0x101aa [0151.602] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.602] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.602] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.2bf8098_r11_ad1", lpWindowName="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n", dwStyle=0x5600000d, X=4, Y=18, nWidth=328, nHeight=73, hWndParent=0x101aa, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101b0 [0151.602] SetWindowLongW (hWnd=0x101b0, nIndex=-4, dwNewLong=2002172128) returned 81790678 [0151.602] GetWindowLongW (hWnd=0x101b0, nIndex=-4) returned 2002172128 [0151.603] SetWindowLongW (hWnd=0x101b0, nIndex=-4, dwNewLong=81790998) returned 2002172128 [0151.603] GetWindowLongW (hWnd=0x101b0, nIndex=-4) returned 81790998 [0151.603] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned 1174405133 [0151.603] GetWindowLongW (hWnd=0x101b0, nIndex=-12) returned 0 [0151.603] SetWindowLongW (hWnd=0x101b0, nIndex=-12, dwNewLong=65968) returned 0 [0151.603] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x81, wParam=0x0, lParam=0xb7e2a8) returned 0x1 [0151.603] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x83, wParam=0x0, lParam=0xb7e294) returned 0x0 [0151.603] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x1, wParam=0x0, lParam=0xb7e2a8) returned 0x0 [0151.603] GetWindow (hWnd=0x101b0, uCmd=0x3) returned 0x101ae [0151.603] GetClientRect (in: hWnd=0x101b0, lpRect=0xb7dfb8 | out: lpRect=0xb7dfb8) returned 1 [0151.603] GetWindowRect (in: hWnd=0x101b0, lpRect=0xb7dfb8 | out: lpRect=0xb7dfb8) returned 1 [0151.603] GetParent (hWnd=0x101b0) returned 0x101aa [0151.603] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101aa, lpPoints=0xb7dfb8, cPoints=0x2 | out: lpPoints=0xb7dfb8) returned -11141532 [0151.603] SetWindowTextW (hWnd=0x101b0, lpString="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n") returned 1 [0151.603] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0xc, wParam=0x0, lParam=0x296a254) returned 0x1 [0151.603] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x5, wParam=0x0, lParam=0x490148) returned 0x0 [0151.604] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x3, wParam=0x0, lParam=0x120004) returned 0x0 [0151.604] GetClientRect (in: hWnd=0x101b0, lpRect=0xb7e014 | out: lpRect=0xb7e014) returned 1 [0151.604] GetWindowRect (in: hWnd=0x101b0, lpRect=0xb7e014 | out: lpRect=0xb7e014) returned 1 [0151.604] GetParent (hWnd=0x101b0) returned 0x101aa [0151.604] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101aa, lpPoints=0xb7e014, cPoints=0x2 | out: lpPoints=0xb7e014) returned -11141532 [0151.604] SendMessageW (hWnd=0x101b0, Msg=0x2210, wParam=0x1b00001, lParam=0x101b0) returned 0x0 [0151.604] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x2210, wParam=0x1b00001, lParam=0x101b0) returned 0x0 [0151.604] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.604] GetParent (hWnd=0x101b0) returned 0x101aa [0151.604] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.604] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.604] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName="Message", dwStyle=0x56000000, X=12, Y=17, nWidth=363, nHeight=196, hWndParent=0x101a0, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101b2 [0151.604] SetWindowLongW (hWnd=0x101b2, nIndex=-4, dwNewLong=1960951274) returned 81790438 [0151.604] GetWindowLongW (hWnd=0x101b2, nIndex=-4) returned 1960951274 [0151.604] SetWindowLongW (hWnd=0x101b2, nIndex=-4, dwNewLong=81791038) returned 1960951274 [0151.605] GetWindowLongW (hWnd=0x101b2, nIndex=-4) returned 81791038 [0151.605] GetWindowLongW (hWnd=0x101b2, nIndex=-16) returned 1174405120 [0151.605] GetWindowLongW (hWnd=0x101b2, nIndex=-12) returned 0 [0151.605] SetWindowLongW (hWnd=0x101b2, nIndex=-12, dwNewLong=65970) returned 0 [0151.605] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0x81, wParam=0x0, lParam=0xb7e2e0) returned 0x1 [0151.605] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0x83, wParam=0x0, lParam=0xb7e2cc) returned 0x0 [0151.605] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0x1, wParam=0x0, lParam=0xb7e2e0) returned 0x0 [0151.605] GetWindow (hWnd=0x101b2, uCmd=0x3) returned 0x101aa [0151.605] GetClientRect (in: hWnd=0x101b2, lpRect=0xb7e020 | out: lpRect=0xb7e020) returned 1 [0151.605] GetWindowRect (in: hWnd=0x101b2, lpRect=0xb7e020 | out: lpRect=0xb7e020) returned 1 [0151.605] GetParent (hWnd=0x101b2) returned 0x101a0 [0151.605] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7e020, cPoints=0x2 | out: lpPoints=0xb7e020) returned -3342365 [0151.605] SetWindowTextW (hWnd=0x101b2, lpString="Message") returned 1 [0151.605] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0xc, wParam=0x0, lParam=0x296a104) returned 0x1 [0151.605] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0x5, wParam=0x0, lParam=0xc4016b) returned 0x0 [0151.605] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0x3, wParam=0x0, lParam=0x11000c) returned 0x0 [0151.605] GetClientRect (in: hWnd=0x101b2, lpRect=0xb7e07c | out: lpRect=0xb7e07c) returned 1 [0151.605] GetWindowRect (in: hWnd=0x101b2, lpRect=0xb7e07c | out: lpRect=0xb7e07c) returned 1 [0151.605] GetParent (hWnd=0x101b2) returned 0x101a0 [0151.605] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7e07c, cPoints=0x2 | out: lpPoints=0xb7e07c) returned -3342365 [0151.606] SendMessageW (hWnd=0x101b2, Msg=0x2210, wParam=0x1b20001, lParam=0x101b2) returned 0x0 [0151.606] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0x2210, wParam=0x1b20001, lParam=0x101b2) returned 0x0 [0151.606] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.606] GetParent (hWnd=0x101b2) returned 0x101a0 [0151.606] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.606] GetClassInfoW (in: hInstance=0x0, lpClassName="RichEdit20W", lpWndClass=0x2978fb8 | out: lpWndClass=0x2978fb8) returned 1 [0151.606] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.607] CoTaskMemAlloc (cb=0x62) returned 0xd7c280 [0151.607] RegisterClassW (lpWndClass=0xb7e704) returned 0xc13b [0151.607] CoTaskMemFree (pv=0xd7c280) [0151.607] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.607] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.RichEdit20W.app.0.2bf8098_r11_ad1", lpWindowName=0x0, dwStyle=0x56210844, X=3, Y=16, nWidth=357, nHeight=177, hWndParent=0x101b2, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101b4 [0151.608] SetWindowLongW (hWnd=0x101b4, nIndex=-4, dwNewLong=1896816141) returned 81790134 [0151.608] GetWindowLongW (hWnd=0x101b4, nIndex=-4) returned 1896816141 [0151.608] SetWindowLongW (hWnd=0x101b4, nIndex=-4, dwNewLong=81803998) returned 1896816141 [0151.608] GetWindowLongW (hWnd=0x101b4, nIndex=-4) returned 81803998 [0151.608] GetWindowLongW (hWnd=0x101b4, nIndex=-16) returned 1176569924 [0151.608] GetWindowLongW (hWnd=0x101b4, nIndex=-12) returned 0 [0151.608] SetWindowLongW (hWnd=0x101b4, nIndex=-12, dwNewLong=65972) returned 0 [0151.608] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x81, wParam=0x0, lParam=0xb7e288) returned 0x1 [0151.608] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x7c, wParam=0xffffffec, lParam=0xb7d458) returned 0x0 [0151.608] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x7d, wParam=0xffffffec, lParam=0xb7d458) returned 0x0 [0151.611] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x83, wParam=0x0, lParam=0xb7e274) returned 0x0 [0151.611] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x1, wParam=0x0, lParam=0xb7e288) returned 0x0 [0151.612] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x46, wParam=0x0, lParam=0xb7d454) returned 0x0 [0151.612] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x83, wParam=0x1, lParam=0xb7d42c) returned 0x0 [0151.612] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x47, wParam=0x0, lParam=0xb7d454) returned 0x0 [0151.612] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x5, wParam=0x0, lParam=0xad0161) returned 0x0 [0151.612] GetClientRect (in: hWnd=0x101b4, lpRect=0xb7d190 | out: lpRect=0xb7d190) returned 1 [0151.612] GetWindowRect (in: hWnd=0x101b4, lpRect=0xb7d190 | out: lpRect=0xb7d190) returned 1 [0151.612] GetParent (hWnd=0x101b4) returned 0x101b2 [0151.612] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101b2, lpPoints=0xb7d190, cPoints=0x2 | out: lpPoints=0xb7d190) returned -4456489 [0151.612] GetParent (hWnd=0x101b4) returned 0x101b2 [0151.643] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x7c, wParam=0xfffffff0, lParam=0xb7d520) returned 0x0 [0151.643] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x7d, wParam=0xfffffff0, lParam=0xb7d520) returned 0x1 [0151.643] GetWindow (hWnd=0x101b4, uCmd=0x3) returned 0x0 [0151.643] GetClientRect (in: hWnd=0x101b4, lpRect=0xb7dfac | out: lpRect=0xb7dfac) returned 1 [0151.643] GetWindowRect (in: hWnd=0x101b4, lpRect=0xb7dfac | out: lpRect=0xb7dfac) returned 1 [0151.643] GetParent (hWnd=0x101b4) returned 0x101b2 [0151.643] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101b2, lpPoints=0xb7dfac, cPoints=0x2 | out: lpPoints=0xb7dfac) returned -4456489 [0151.643] SendMessageW (hWnd=0x101b4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0151.643] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0151.643] SendMessageW (hWnd=0x101b4, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0151.643] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0151.644] SendMessageW (hWnd=0x101b4, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0151.644] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0151.644] SendMessageW (hWnd=0x101b4, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0x841 [0151.644] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0x841 [0151.644] SendMessageW (hWnd=0x101b4, Msg=0x443, wParam=0x0, lParam=0x0) returned 0xffffff [0151.644] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x443, wParam=0x0, lParam=0x0) returned 0xffffff [0151.644] SendMessageW (hWnd=0x101b4, Msg=0x43a, wParam=0x0, lParam=0xb7de88) returned 0xf800003f [0151.644] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x43a, wParam=0x0, lParam=0xb7de88) returned 0xf800003f [0151.644] SendMessageW (hWnd=0x101b4, Msg=0x444, wParam=0x4, lParam=0xb7de88) returned 0x1 [0151.644] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x444, wParam=0x4, lParam=0xb7de88) returned 0x1 [0151.645] SendMessageW (hWnd=0x101b4, Msg=0x204e, wParam=0x101b4, lParam=0xb7cf0c) returned 0x0 [0151.646] SendMessageW (hWnd=0x101b4, Msg=0x2111, wParam=0x30001b4, lParam=0x101b4) returned 0x0 [0151.646] SendMessageW (hWnd=0x101b4, Msg=0x30, wParam=0x20a0583, lParam=0x0) returned 0x1 [0151.646] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x30, wParam=0x20a0583, lParam=0x0) returned 0x1 [0151.647] SendMessageW (hWnd=0x101b4, Msg=0x204e, wParam=0x101b4, lParam=0xb7cb08) returned 0x0 [0151.647] SendMessageW (hWnd=0x101b4, Msg=0x204e, wParam=0x101b4, lParam=0xb7cecc) returned 0x0 [0151.647] SendMessageW (hWnd=0x101b4, Msg=0x2111, wParam=0x30001b4, lParam=0x101b4) returned 0x0 [0151.647] SendMessageW (hWnd=0x101b4, Msg=0x43a, wParam=0x0, lParam=0xb7db5c) returned 0xf800003f [0151.647] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x43a, wParam=0x0, lParam=0xb7db5c) returned 0xf800003f [0151.647] SendMessageW (hWnd=0x101b4, Msg=0x444, wParam=0x4, lParam=0xb7db5c) returned 0x1 [0151.647] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x444, wParam=0x4, lParam=0xb7db5c) returned 0x1 [0151.647] SendMessageW (hWnd=0x101b4, Msg=0x204e, wParam=0x101b4, lParam=0xb7cbdc) returned 0x0 [0151.647] SendMessageW (hWnd=0x101b4, Msg=0x2111, wParam=0x30001b4, lParam=0x101b4) returned 0x0 [0151.647] GetSystemMetrics (nIndex=5) returned 1 [0151.647] GetSystemMetrics (nIndex=6) returned 1 [0151.647] SendMessageW (hWnd=0x101b4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0151.647] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0151.655] SendMessageW (hWnd=0x101b4, Msg=0x446, wParam=0x0, lParam=0x4fa0030) returned 0x1 [0151.655] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x446, wParam=0x0, lParam=0x4fa0030) returned 0x1 [0151.660] DragAcceptFiles (hWnd=0x101b4, fAccept=0) [0151.660] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x7c, wParam=0xffffffec, lParam=0xb7de70) returned 0x0 [0151.660] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x7d, wParam=0xffffffec, lParam=0xb7de70) returned 0x1 [0151.661] SendMessageW (hWnd=0x101b4, Msg=0x437, wParam=0x0, lParam=0x2979ac8) returned 0x0 [0151.661] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x437, wParam=0x0, lParam=0x2979ac8) returned 0x0 [0151.661] SendMessageW (hWnd=0x101b4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0151.661] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0151.662] SendMessageW (hWnd=0x101b4, Msg=0x449, wParam=0x11, lParam=0xb7de68) returned 0x23a [0151.662] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x449, wParam=0x11, lParam=0xb7de68) returned 0x23a [0151.663] SendMessageW (hWnd=0x101b4, Msg=0x204e, wParam=0x101b4, lParam=0xb7cda8) returned 0x0 [0151.663] SendMessageW (hWnd=0x101b4, Msg=0x2111, wParam=0x30001b4, lParam=0x101b4) returned 0x0 [0151.663] SendMessageW (hWnd=0x101b4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0151.663] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0151.663] SendMessageW (hWnd=0x101b4, Msg=0xb9, wParam=0xffffffff, lParam=0x0) returned 0x0 [0151.663] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0xb9, wParam=0xffffffff, lParam=0x0) returned 0x0 [0151.663] SendMessageW (hWnd=0x101b4, Msg=0xba, wParam=0x0, lParam=0x0) returned 0xc [0151.663] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0xba, wParam=0x0, lParam=0x0) returned 0xc [0151.663] SendMessageW (hWnd=0x101b4, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0151.663] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0151.663] SendMessageW (hWnd=0x101b4, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0151.663] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0151.663] SendMessageW (hWnd=0x101b4, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0151.663] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0151.663] SendMessageW (hWnd=0x101b4, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0151.663] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0151.664] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x5, wParam=0x0, lParam=0xad0161) returned 0x0 [0151.664] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x3, wParam=0x0, lParam=0x120005) returned 0x0 [0151.664] GetClientRect (in: hWnd=0x101b4, lpRect=0xb7e008 | out: lpRect=0xb7e008) returned 1 [0151.664] GetWindowRect (in: hWnd=0x101b4, lpRect=0xb7e008 | out: lpRect=0xb7e008) returned 1 [0151.664] GetParent (hWnd=0x101b4) returned 0x101b2 [0151.664] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101b2, lpPoints=0xb7e008, cPoints=0x2 | out: lpPoints=0xb7e008) returned -4456489 [0151.664] SendMessageW (hWnd=0x101b4, Msg=0x2210, wParam=0x1b40001, lParam=0x101b4) returned 0x0 [0151.664] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x2210, wParam=0x1b40001, lParam=0x101b4) returned 0x0 [0151.664] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.664] GetParent (hWnd=0x101b4) returned 0x101b2 [0151.664] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.664] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.664] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName="Bictoins", dwStyle=0x56000000, X=12, Y=219, nWidth=711, nHeight=60, hWndParent=0x101a0, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101b6 [0151.665] SetWindowLongW (hWnd=0x101b6, nIndex=-4, dwNewLong=1960951274) returned 81790438 [0151.665] GetWindowLongW (hWnd=0x101b6, nIndex=-4) returned 1960951274 [0151.665] SetWindowLongW (hWnd=0x101b6, nIndex=-4, dwNewLong=81803798) returned 1960951274 [0151.665] GetWindowLongW (hWnd=0x101b6, nIndex=-4) returned 81803798 [0151.665] GetWindowLongW (hWnd=0x101b6, nIndex=-16) returned 1174405120 [0151.665] GetWindowLongW (hWnd=0x101b6, nIndex=-12) returned 0 [0151.665] SetWindowLongW (hWnd=0x101b6, nIndex=-12, dwNewLong=65974) returned 0 [0151.665] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0x81, wParam=0x0, lParam=0xb7e2e0) returned 0x1 [0151.665] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0x83, wParam=0x0, lParam=0xb7e2cc) returned 0x0 [0151.665] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0x1, wParam=0x0, lParam=0xb7e2e0) returned 0x0 [0151.665] GetWindow (hWnd=0x101b6, uCmd=0x3) returned 0x101b2 [0151.665] GetClientRect (in: hWnd=0x101b6, lpRect=0xb7e020 | out: lpRect=0xb7e020) returned 1 [0151.665] GetWindowRect (in: hWnd=0x101b6, lpRect=0xb7e020 | out: lpRect=0xb7e020) returned 1 [0151.665] GetParent (hWnd=0x101b6) returned 0x101a0 [0151.665] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7e020, cPoints=0x2 | out: lpPoints=0xb7e020) returned -3342365 [0151.665] SetWindowTextW (hWnd=0x101b6, lpString="Bictoins") returned 1 [0151.665] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0xc, wParam=0x0, lParam=0x2969fa8) returned 0x1 [0151.666] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0x5, wParam=0x0, lParam=0x3c02c7) returned 0x0 [0151.666] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0x3, wParam=0x0, lParam=0xdb000c) returned 0x0 [0151.666] GetClientRect (in: hWnd=0x101b6, lpRect=0xb7e07c | out: lpRect=0xb7e07c) returned 1 [0151.666] GetWindowRect (in: hWnd=0x101b6, lpRect=0xb7e07c | out: lpRect=0xb7e07c) returned 1 [0151.666] GetParent (hWnd=0x101b6) returned 0x101a0 [0151.666] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7e07c, cPoints=0x2 | out: lpPoints=0xb7e07c) returned -3342365 [0151.666] SendMessageW (hWnd=0x101b6, Msg=0x2210, wParam=0x1b60001, lParam=0x101b6) returned 0x0 [0151.666] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0x2210, wParam=0x1b60001, lParam=0x101b6) returned 0x0 [0151.666] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.666] GetParent (hWnd=0x101b6) returned 0x101a0 [0151.666] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.666] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.666] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.2bf8098_r11_ad1", lpWindowName="Send 100$ to this bitcoins adress:", dwStyle=0x5600000d, X=6, Y=14, nWidth=166, nHeight=13, hWndParent=0x101b6, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101b8 [0151.666] SetWindowLongW (hWnd=0x101b8, nIndex=-4, dwNewLong=2002172128) returned 81790678 [0151.667] GetWindowLongW (hWnd=0x101b8, nIndex=-4) returned 2002172128 [0151.667] SetWindowLongW (hWnd=0x101b8, nIndex=-4, dwNewLong=81803398) returned 2002172128 [0151.667] GetWindowLongW (hWnd=0x101b8, nIndex=-4) returned 81803398 [0151.667] GetWindowLongW (hWnd=0x101b8, nIndex=-16) returned 1174405133 [0151.667] GetWindowLongW (hWnd=0x101b8, nIndex=-12) returned 0 [0151.667] SetWindowLongW (hWnd=0x101b8, nIndex=-12, dwNewLong=65976) returned 0 [0151.667] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0x81, wParam=0x0, lParam=0xb7e2a8) returned 0x1 [0151.667] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0x83, wParam=0x0, lParam=0xb7e294) returned 0x0 [0151.667] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0x1, wParam=0x0, lParam=0xb7e2a8) returned 0x0 [0151.667] GetWindow (hWnd=0x101b8, uCmd=0x3) returned 0x0 [0151.667] GetClientRect (in: hWnd=0x101b8, lpRect=0xb7dfb8 | out: lpRect=0xb7dfb8) returned 1 [0151.667] GetWindowRect (in: hWnd=0x101b8, lpRect=0xb7dfb8 | out: lpRect=0xb7dfb8) returned 1 [0151.667] GetParent (hWnd=0x101b8) returned 0x101b6 [0151.667] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101b6, lpPoints=0xb7dfb8, cPoints=0x2 | out: lpPoints=0xb7dfb8) returned -17694761 [0151.667] SetWindowTextW (hWnd=0x101b8, lpString="Send 100$ to this bitcoins adress:") returned 1 [0151.667] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0xc, wParam=0x0, lParam=0x2969fe4) returned 0x1 [0151.668] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0x5, wParam=0x0, lParam=0xd00a6) returned 0x0 [0151.668] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0x3, wParam=0x0, lParam=0xe0006) returned 0x0 [0151.668] GetClientRect (in: hWnd=0x101b8, lpRect=0xb7e014 | out: lpRect=0xb7e014) returned 1 [0151.668] GetWindowRect (in: hWnd=0x101b8, lpRect=0xb7e014 | out: lpRect=0xb7e014) returned 1 [0151.668] GetParent (hWnd=0x101b8) returned 0x101b6 [0151.668] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101b6, lpPoints=0xb7e014, cPoints=0x2 | out: lpPoints=0xb7e014) returned -17694761 [0151.668] SendMessageW (hWnd=0x101b8, Msg=0x2210, wParam=0x1b80001, lParam=0x101b8) returned 0x0 [0151.668] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0x2210, wParam=0x1b80001, lParam=0x101b8) returned 0x0 [0151.668] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.668] GetParent (hWnd=0x101b8) returned 0x101b6 [0151.668] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.668] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.668] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.2bf8098_r11_ad1", lpWindowName="1PNh6dmaUtv96C7ezTdUqVvfWBUYuCBbUM", dwStyle=0x560108c0, X=6, Y=32, nWidth=699, nHeight=20, hWndParent=0x101b6, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101ba [0151.668] SetWindowLongW (hWnd=0x101ba, nIndex=-4, dwNewLong=2002172032) returned 81790758 [0151.668] GetWindowLongW (hWnd=0x101ba, nIndex=-4) returned 2002172032 [0151.669] SetWindowLongW (hWnd=0x101ba, nIndex=-4, dwNewLong=81803838) returned 2002172032 [0151.669] GetWindowLongW (hWnd=0x101ba, nIndex=-4) returned 81803838 [0151.669] GetWindowLongW (hWnd=0x101ba, nIndex=-16) returned 1174472896 [0151.669] GetWindowLongW (hWnd=0x101ba, nIndex=-12) returned 0 [0151.669] SetWindowLongW (hWnd=0x101ba, nIndex=-12, dwNewLong=65978) returned 0 [0151.669] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x81, wParam=0x0, lParam=0xb7e288) returned 0x1 [0151.669] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x83, wParam=0x0, lParam=0xb7e274) returned 0x0 [0151.669] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x1, wParam=0x0, lParam=0xb7e288) returned 0x1 [0151.669] SendMessageW (hWnd=0x101ba, Msg=0x2111, wParam=0x40001ba, lParam=0x101ba) returned 0x0 [0151.669] SendMessageW (hWnd=0x101ba, Msg=0x2111, wParam=0x30001ba, lParam=0x101ba) returned 0x0 [0151.669] GetWindow (hWnd=0x101ba, uCmd=0x3) returned 0x101b8 [0151.669] GetClientRect (in: hWnd=0x101ba, lpRect=0xb7dfac | out: lpRect=0xb7dfac) returned 1 [0151.669] GetWindowRect (in: hWnd=0x101ba, lpRect=0xb7dfac | out: lpRect=0xb7dfac) returned 1 [0151.669] GetParent (hWnd=0x101ba) returned 0x101b6 [0151.669] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101b6, lpPoints=0xb7dfac, cPoints=0x2 | out: lpPoints=0xb7dfac) returned -17694761 [0151.669] GetDC (hWnd=0x0) returned 0x180106e6 [0151.669] GdipCreateFromHDC (hdc=0x180106e6, graphics=0xb7de54) returned 0x0 [0151.670] CoTaskMemAlloc (cb=0x5c) returned 0xd7e200 [0151.670] GdipGetLogFontW (font=0x28b1f08, graphics=0x50186d8, logfontW=0xd7e200) returned 0x0 [0151.670] CoTaskMemFree (pv=0xd7e200) [0151.670] CoTaskMemAlloc (cb=0x5c) returned 0xd7de58 [0151.670] CoTaskMemFree (pv=0xd7de58) [0151.670] CoTaskMemAlloc (cb=0x5c) returned 0xd7df28 [0151.670] CoTaskMemFree (pv=0xd7df28) [0151.670] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.670] ReleaseDC (hWnd=0x0, hDC=0x180106e6) returned 1 [0151.670] CoTaskMemAlloc (cb=0x5c) returned 0xd7dbe8 [0151.670] CreateFontIndirectW (lplf=0xd7dbe8) returned 0x180a058d [0151.670] CoTaskMemFree (pv=0xd7dbe8) [0151.670] SendMessageW (hWnd=0x101ba, Msg=0x30, wParam=0x180a058d, lParam=0x0) returned 0x1 [0151.670] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x30, wParam=0x180a058d, lParam=0x0) returned 0x1 [0151.670] SendMessageW (hWnd=0x101ba, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0151.670] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0151.670] SetWindowTextW (hWnd=0x101ba, lpString="1PNh6dmaUtv96C7ezTdUqVvfWBUYuCBbUM") returned 1 [0151.670] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0xc, wParam=0x0, lParam=0x296a090) returned 0x1 [0151.670] SendMessageW (hWnd=0x101ba, Msg=0x2111, wParam=0x40001ba, lParam=0x101ba) returned 0x0 [0151.670] SendMessageW (hWnd=0x101ba, Msg=0x2111, wParam=0x30001ba, lParam=0x101ba) returned 0x0 [0151.670] GetSystemMetrics (nIndex=5) returned 1 [0151.670] GetSystemMetrics (nIndex=6) returned 1 [0151.670] SendMessageW (hWnd=0x101ba, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0151.670] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0151.671] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x5, wParam=0x0, lParam=0x1002b7) returned 0x0 [0151.671] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x3, wParam=0x0, lParam=0x220008) returned 0x0 [0151.671] GetClientRect (in: hWnd=0x101ba, lpRect=0xb7e008 | out: lpRect=0xb7e008) returned 1 [0151.671] GetWindowRect (in: hWnd=0x101ba, lpRect=0xb7e008 | out: lpRect=0xb7e008) returned 1 [0151.671] GetParent (hWnd=0x101ba) returned 0x101b6 [0151.671] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101b6, lpPoints=0xb7e008, cPoints=0x2 | out: lpPoints=0xb7e008) returned -17694761 [0151.671] SendMessageW (hWnd=0x101ba, Msg=0x2210, wParam=0x1ba0001, lParam=0x101ba) returned 0x0 [0151.671] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x2210, wParam=0x1ba0001, lParam=0x101ba) returned 0x0 [0151.671] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.671] GetParent (hWnd=0x101ba) returned 0x101b6 [0151.671] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.671] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.671] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", lpWindowName="Time", dwStyle=0x56000000, X=381, Y=17, nWidth=340, nHeight=94, hWndParent=0x101a0, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101bc [0151.672] SetWindowLongW (hWnd=0x101bc, nIndex=-4, dwNewLong=1960951274) returned 81790438 [0151.672] GetWindowLongW (hWnd=0x101bc, nIndex=-4) returned 1960951274 [0151.672] SetWindowLongW (hWnd=0x101bc, nIndex=-4, dwNewLong=81803878) returned 1960951274 [0151.672] GetWindowLongW (hWnd=0x101bc, nIndex=-4) returned 81803878 [0151.672] GetWindowLongW (hWnd=0x101bc, nIndex=-16) returned 1174405120 [0151.672] GetWindowLongW (hWnd=0x101bc, nIndex=-12) returned 0 [0151.672] SetWindowLongW (hWnd=0x101bc, nIndex=-12, dwNewLong=65980) returned 0 [0151.672] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0x81, wParam=0x0, lParam=0xb7e2e0) returned 0x1 [0151.672] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0x83, wParam=0x0, lParam=0xb7e2cc) returned 0x0 [0151.672] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0x1, wParam=0x0, lParam=0xb7e2e0) returned 0x0 [0151.672] GetWindow (hWnd=0x101bc, uCmd=0x3) returned 0x101b6 [0151.672] GetClientRect (in: hWnd=0x101bc, lpRect=0xb7e020 | out: lpRect=0xb7e020) returned 1 [0151.672] GetWindowRect (in: hWnd=0x101bc, lpRect=0xb7e020 | out: lpRect=0xb7e020) returned 1 [0151.672] GetParent (hWnd=0x101bc) returned 0x101a0 [0151.672] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7e020, cPoints=0x2 | out: lpPoints=0xb7e020) returned -3342365 [0151.672] SetWindowTextW (hWnd=0x101bc, lpString="Time") returned 1 [0151.672] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0xc, wParam=0x0, lParam=0x2969ed8) returned 0x1 [0151.673] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0x5, wParam=0x0, lParam=0x5e0154) returned 0x0 [0151.673] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0x3, wParam=0x0, lParam=0x11017d) returned 0x0 [0151.673] GetClientRect (in: hWnd=0x101bc, lpRect=0xb7e07c | out: lpRect=0xb7e07c) returned 1 [0151.673] GetWindowRect (in: hWnd=0x101bc, lpRect=0xb7e07c | out: lpRect=0xb7e07c) returned 1 [0151.673] GetParent (hWnd=0x101bc) returned 0x101a0 [0151.673] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7e07c, cPoints=0x2 | out: lpPoints=0xb7e07c) returned -3342365 [0151.673] SendMessageW (hWnd=0x101bc, Msg=0x2210, wParam=0x1bc0001, lParam=0x101bc) returned 0x0 [0151.673] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0x2210, wParam=0x1bc0001, lParam=0x101bc) returned 0x0 [0151.673] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.673] GetParent (hWnd=0x101bc) returned 0x101a0 [0151.673] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.673] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.673] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.2bf8098_r11_ad1", lpWindowName="Destruction de fichier prevue le ", dwStyle=0x5600000d, X=6, Y=65, nWidth=328, nHeight=23, hWndParent=0x101bc, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101be [0151.673] SetWindowLongW (hWnd=0x101be, nIndex=-4, dwNewLong=2002172128) returned 81790678 [0151.674] GetWindowLongW (hWnd=0x101be, nIndex=-4) returned 2002172128 [0151.674] SetWindowLongW (hWnd=0x101be, nIndex=-4, dwNewLong=81803758) returned 2002172128 [0151.674] GetWindowLongW (hWnd=0x101be, nIndex=-4) returned 81803758 [0151.674] GetWindowLongW (hWnd=0x101be, nIndex=-16) returned 1174405133 [0151.674] GetWindowLongW (hWnd=0x101be, nIndex=-12) returned 0 [0151.674] SetWindowLongW (hWnd=0x101be, nIndex=-12, dwNewLong=65982) returned 0 [0151.674] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x81, wParam=0x0, lParam=0xb7e2a8) returned 0x1 [0151.674] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x83, wParam=0x0, lParam=0xb7e294) returned 0x0 [0151.674] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x1, wParam=0x0, lParam=0xb7e2a8) returned 0x0 [0151.674] GetWindow (hWnd=0x101be, uCmd=0x3) returned 0x0 [0151.674] GetClientRect (in: hWnd=0x101be, lpRect=0xb7dfb8 | out: lpRect=0xb7dfb8) returned 1 [0151.674] GetWindowRect (in: hWnd=0x101be, lpRect=0xb7dfb8 | out: lpRect=0xb7dfb8) returned 1 [0151.674] GetParent (hWnd=0x101be) returned 0x101bc [0151.674] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101bc, lpPoints=0xb7dfb8, cPoints=0x2 | out: lpPoints=0xb7dfb8) returned -4456858 [0151.674] SetWindowTextW (hWnd=0x101be, lpString="Destruction de fichier prevue le ") returned 1 [0151.674] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0xc, wParam=0x0, lParam=0x2969f0c) returned 0x1 [0151.674] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x5, wParam=0x0, lParam=0x170148) returned 0x0 [0151.675] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x3, wParam=0x0, lParam=0x410006) returned 0x0 [0151.675] GetClientRect (in: hWnd=0x101be, lpRect=0xb7e014 | out: lpRect=0xb7e014) returned 1 [0151.675] GetWindowRect (in: hWnd=0x101be, lpRect=0xb7e014 | out: lpRect=0xb7e014) returned 1 [0151.675] GetParent (hWnd=0x101be) returned 0x101bc [0151.675] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101bc, lpPoints=0xb7e014, cPoints=0x2 | out: lpPoints=0xb7e014) returned -4456858 [0151.675] SendMessageW (hWnd=0x101be, Msg=0x2210, wParam=0x1be0001, lParam=0x101be) returned 0x0 [0151.675] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x2210, wParam=0x1be0001, lParam=0x101be) returned 0x0 [0151.675] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.675] GetParent (hWnd=0x101be) returned 0x101bc [0151.678] InitCommonControlsEx (picce=0x297c110) returned 1 [0151.678] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.678] GetClassInfoW (in: hInstance=0x0, lpClassName="msctls_progress32", lpWndClass=0x297c17c | out: lpWndClass=0x297c17c) returned 1 [0151.678] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.678] CoTaskMemAlloc (cb=0x6e) returned 0xd9d2d0 [0151.678] RegisterClassW (lpWndClass=0xb7e700) returned 0xc13e [0151.678] CoTaskMemFree (pv=0xd9d2d0) [0151.679] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.679] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.msctls_progress32.app.0.2bf8098_r11_ad1", lpWindowName=0x0, dwStyle=0x56010000, X=6, Y=19, nWidth=328, nHeight=33, hWndParent=0x101bc, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101c0 [0151.679] SetWindowLongW (hWnd=0x101c0, nIndex=-4, dwNewLong=1971397870) returned 81804118 [0151.679] GetWindowLongW (hWnd=0x101c0, nIndex=-4) returned 1971397870 [0151.679] SetWindowLongW (hWnd=0x101c0, nIndex=-4, dwNewLong=81803278) returned 1971397870 [0151.679] GetWindowLongW (hWnd=0x101c0, nIndex=-4) returned 81803278 [0151.679] GetWindowLongW (hWnd=0x101c0, nIndex=-16) returned 1174470656 [0151.679] GetWindowLongW (hWnd=0x101c0, nIndex=-12) returned 0 [0151.679] SetWindowLongW (hWnd=0x101c0, nIndex=-12, dwNewLong=65984) returned 0 [0151.679] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x81, wParam=0x0, lParam=0xb7e280) returned 0x1 [0151.679] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x83, wParam=0x0, lParam=0xb7e26c) returned 0x0 [0151.679] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x1, wParam=0x0, lParam=0xb7e280) returned 0x0 [0151.680] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x7c, wParam=0xffffffec, lParam=0xb7de14) returned 0x0 [0151.680] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x7d, wParam=0xffffffec, lParam=0xb7de14) returned 0x0 [0151.680] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x46, wParam=0x0, lParam=0xb7de24) returned 0x0 [0151.680] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x83, wParam=0x1, lParam=0xb7ddfc) returned 0x0 [0151.680] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x47, wParam=0x0, lParam=0xb7de24) returned 0x0 [0151.680] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x3, wParam=0x0, lParam=0x140007) returned 0x0 [0151.680] GetClientRect (in: hWnd=0x101c0, lpRect=0xb7d5d0 | out: lpRect=0xb7d5d0) returned 1 [0151.680] GetWindowRect (in: hWnd=0x101c0, lpRect=0xb7d5d0 | out: lpRect=0xb7d5d0) returned 1 [0151.680] GetParent (hWnd=0x101c0) returned 0x101bc [0151.680] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101bc, lpPoints=0xb7d5d0, cPoints=0x2 | out: lpPoints=0xb7d5d0) returned -4456858 [0151.680] GetWindowTextLengthW (hWnd=0x101c0) returned 0 [0151.680] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0151.680] GetSystemMetrics (nIndex=42) returned 0 [0151.680] GetWindowTextW (in: hWnd=0x101c0, lpString=0xb7d460, nMaxCount=1 | out: lpString="") returned 0 [0151.680] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0xd, wParam=0x1, lParam=0xb7d460) returned 0x0 [0151.680] GetWindowTextLengthW (hWnd=0x101bc) returned 4 [0151.680] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0151.680] GetSystemMetrics (nIndex=42) returned 0 [0151.681] GetWindowTextW (in: hWnd=0x101bc, lpString=0xb7d418, nMaxCount=5 | out: lpString="Time") returned 4 [0151.681] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0xd, wParam=0x5, lParam=0xb7d418) returned 0x4 [0151.681] GetWindowTextLengthW (hWnd=0x101bc) returned 4 [0151.681] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0151.681] GetSystemMetrics (nIndex=42) returned 0 [0151.681] GetWindowTextW (in: hWnd=0x101bc, lpString=0xb7d484, nMaxCount=5 | out: lpString="Time") returned 4 [0151.681] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0xd, wParam=0x5, lParam=0xb7d484) returned 0x4 [0151.681] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x5, wParam=0x0, lParam=0x1f0146) returned 0x0 [0151.681] GetClientRect (in: hWnd=0x101c0, lpRect=0xb7db88 | out: lpRect=0xb7db88) returned 1 [0151.681] GetWindowRect (in: hWnd=0x101c0, lpRect=0xb7db88 | out: lpRect=0xb7db88) returned 1 [0151.681] GetParent (hWnd=0x101c0) returned 0x101bc [0151.681] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101bc, lpPoints=0xb7db88, cPoints=0x2 | out: lpPoints=0xb7db88) returned -4456858 [0151.681] GetParent (hWnd=0x101c0) returned 0x101bc [0151.681] GetWindow (hWnd=0x101c0, uCmd=0x3) returned 0x101be [0151.681] GetClientRect (in: hWnd=0x101c0, lpRect=0xb7dfcc | out: lpRect=0xb7dfcc) returned 1 [0151.681] GetWindowRect (in: hWnd=0x101c0, lpRect=0xb7dfcc | out: lpRect=0xb7dfcc) returned 1 [0151.681] GetParent (hWnd=0x101c0) returned 0x101bc [0151.681] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101bc, lpPoints=0xb7dfcc, cPoints=0x2 | out: lpPoints=0xb7dfcc) returned -4456858 [0151.681] SendMessageW (hWnd=0x101c0, Msg=0x30, wParam=0x20a0583, lParam=0x0) returned 0x0 [0151.681] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x30, wParam=0x20a0583, lParam=0x0) returned 0x0 [0151.681] SendMessageW (hWnd=0x101c0, Msg=0x406, wParam=0x0, lParam=0x64) returned 0x640000 [0151.681] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x406, wParam=0x0, lParam=0x64) returned 0x640000 [0151.681] SendMessageW (hWnd=0x101c0, Msg=0x404, wParam=0xa, lParam=0x0) returned 0xa [0151.681] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x404, wParam=0xa, lParam=0x0) returned 0xa [0151.681] SendMessageW (hWnd=0x101c0, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0151.681] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0151.681] SendMessageW (hWnd=0x101c0, Msg=0x2001, wParam=0x0, lParam=0x0) returned 0xff000000 [0151.681] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x2001, wParam=0x0, lParam=0x0) returned 0xff000000 [0151.681] SendMessageW (hWnd=0x101c0, Msg=0x409, wParam=0x0, lParam=0xff) returned 0xff000000 [0151.681] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x409, wParam=0x0, lParam=0xff) returned 0xff000000 [0151.682] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x5, wParam=0x0, lParam=0x1f0146) returned 0x0 [0151.682] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x3, wParam=0x0, lParam=0x130006) returned 0x0 [0151.682] GetClientRect (in: hWnd=0x101c0, lpRect=0xb7e028 | out: lpRect=0xb7e028) returned 1 [0151.682] GetWindowRect (in: hWnd=0x101c0, lpRect=0xb7e028 | out: lpRect=0xb7e028) returned 1 [0151.682] GetParent (hWnd=0x101c0) returned 0x101bc [0151.682] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101bc, lpPoints=0xb7e028, cPoints=0x2 | out: lpPoints=0xb7e028) returned -4456858 [0151.682] SendMessageW (hWnd=0x101c0, Msg=0x2210, wParam=0x1c00001, lParam=0x101c0) returned 0x0 [0151.682] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x2210, wParam=0x1c00001, lParam=0x101c0) returned 0x0 [0151.682] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.682] GetParent (hWnd=0x101c0) returned 0x101bc [0151.682] InitCommonControlsEx (picce=0x297c754) returned 1 [0151.682] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.682] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.682] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.msctls_progress32.app.0.2bf8098_r11_ad1", lpWindowName=0x0, dwStyle=0x56010000, X=15, Y=393, nWidth=710, nHeight=35, hWndParent=0x101a0, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101c2 [0151.682] SetWindowLongW (hWnd=0x101c2, nIndex=-4, dwNewLong=1971397870) returned 81804118 [0151.682] GetWindowLongW (hWnd=0x101c2, nIndex=-4) returned 1971397870 [0151.683] SetWindowLongW (hWnd=0x101c2, nIndex=-4, dwNewLong=81803478) returned 1971397870 [0151.683] GetWindowLongW (hWnd=0x101c2, nIndex=-4) returned 81803478 [0151.683] GetWindowLongW (hWnd=0x101c2, nIndex=-16) returned 1174470656 [0151.683] GetWindowLongW (hWnd=0x101c2, nIndex=-12) returned 0 [0151.683] SetWindowLongW (hWnd=0x101c2, nIndex=-12, dwNewLong=65986) returned 0 [0151.683] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x81, wParam=0x0, lParam=0xb7e2c0) returned 0x1 [0151.683] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x83, wParam=0x0, lParam=0xb7e2ac) returned 0x0 [0151.683] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x1, wParam=0x0, lParam=0xb7e2c0) returned 0x0 [0151.683] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x7c, wParam=0xffffffec, lParam=0xb7de54) returned 0x0 [0151.683] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x7d, wParam=0xffffffec, lParam=0xb7de54) returned 0x0 [0151.683] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x46, wParam=0x0, lParam=0xb7de64) returned 0x0 [0151.683] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x83, wParam=0x1, lParam=0xb7de3c) returned 0x0 [0151.684] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x47, wParam=0x0, lParam=0xb7de64) returned 0x0 [0151.684] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x3, wParam=0x0, lParam=0x18a0010) returned 0x0 [0151.684] GetClientRect (in: hWnd=0x101c2, lpRect=0xb7d610 | out: lpRect=0xb7d610) returned 1 [0151.684] GetWindowRect (in: hWnd=0x101c2, lpRect=0xb7d610 | out: lpRect=0xb7d610) returned 1 [0151.684] GetParent (hWnd=0x101c2) returned 0x101a0 [0151.684] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7d610, cPoints=0x2 | out: lpPoints=0xb7d610) returned -3342365 [0151.684] GetWindowTextLengthW (hWnd=0x101c2) returned 0 [0151.684] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0151.684] GetSystemMetrics (nIndex=42) returned 0 [0151.684] GetWindowTextW (in: hWnd=0x101c2, lpString=0xb7d4a0, nMaxCount=1 | out: lpString="") returned 0 [0151.684] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0xd, wParam=0x1, lParam=0xb7d4a0) returned 0x0 [0151.684] GetWindowTextLengthW (hWnd=0x101a0) returned 15 [0151.684] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0151.684] GetSystemMetrics (nIndex=42) returned 0 [0151.684] GetWindowTextW (in: hWnd=0x101a0, lpString=0xb7d4a4, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0151.684] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xd, wParam=0x10, lParam=0xb7d4a4) returned 0xf [0151.684] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x5, wParam=0x0, lParam=0x2102c4) returned 0x0 [0151.684] GetClientRect (in: hWnd=0x101c2, lpRect=0xb7dbc8 | out: lpRect=0xb7dbc8) returned 1 [0151.684] GetWindowRect (in: hWnd=0x101c2, lpRect=0xb7dbc8 | out: lpRect=0xb7dbc8) returned 1 [0151.684] GetParent (hWnd=0x101c2) returned 0x101a0 [0151.684] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7dbc8, cPoints=0x2 | out: lpPoints=0xb7dbc8) returned -3342365 [0151.684] GetParent (hWnd=0x101c2) returned 0x101a0 [0151.684] GetWindow (hWnd=0x101c2, uCmd=0x3) returned 0x101bc [0151.684] GetClientRect (in: hWnd=0x101c2, lpRect=0xb7e00c | out: lpRect=0xb7e00c) returned 1 [0151.684] GetWindowRect (in: hWnd=0x101c2, lpRect=0xb7e00c | out: lpRect=0xb7e00c) returned 1 [0151.684] GetParent (hWnd=0x101c2) returned 0x101a0 [0151.684] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7e00c, cPoints=0x2 | out: lpPoints=0xb7e00c) returned -3342365 [0151.684] SendMessageW (hWnd=0x101c2, Msg=0x30, wParam=0x20a0583, lParam=0x0) returned 0x0 [0151.684] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x30, wParam=0x20a0583, lParam=0x0) returned 0x0 [0151.684] SendMessageW (hWnd=0x101c2, Msg=0x406, wParam=0x0, lParam=0x64) returned 0x640000 [0151.684] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x406, wParam=0x0, lParam=0x64) returned 0x640000 [0151.685] SendMessageW (hWnd=0x101c2, Msg=0x404, wParam=0xa, lParam=0x0) returned 0xa [0151.685] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x404, wParam=0xa, lParam=0x0) returned 0xa [0151.685] SendMessageW (hWnd=0x101c2, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0151.685] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0151.685] SendMessageW (hWnd=0x101c2, Msg=0x2001, wParam=0x0, lParam=0x0) returned 0xff000000 [0151.685] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x2001, wParam=0x0, lParam=0x0) returned 0xff000000 [0151.685] SendMessageW (hWnd=0x101c2, Msg=0x409, wParam=0x0, lParam=0xff9933) returned 0xff000000 [0151.685] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x409, wParam=0x0, lParam=0xff9933) returned 0xff000000 [0151.685] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x5, wParam=0x0, lParam=0x2102c4) returned 0x0 [0151.685] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x3, wParam=0x0, lParam=0x189000f) returned 0x0 [0151.685] GetClientRect (in: hWnd=0x101c2, lpRect=0xb7e068 | out: lpRect=0xb7e068) returned 1 [0151.685] GetWindowRect (in: hWnd=0x101c2, lpRect=0xb7e068 | out: lpRect=0xb7e068) returned 1 [0151.685] GetParent (hWnd=0x101c2) returned 0x101a0 [0151.685] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7e068, cPoints=0x2 | out: lpPoints=0xb7e068) returned -3342365 [0151.685] SendMessageW (hWnd=0x101c2, Msg=0x2210, wParam=0x1c20001, lParam=0x101c2) returned 0x0 [0151.685] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x2210, wParam=0x1c20001, lParam=0x101c2) returned 0x0 [0151.685] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.685] GetParent (hWnd=0x101c2) returned 0x101a0 [0151.685] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.686] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.686] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.2bf8098_r11_ad1", lpWindowName="Decrypt", dwStyle=0x5601000b, X=14, Y=351, nWidth=711, nHeight=36, hWndParent=0x101a0, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101c4 [0151.686] SetWindowLongW (hWnd=0x101c4, nIndex=-4, dwNewLong=2002171904) returned 81790878 [0151.686] GetWindowLongW (hWnd=0x101c4, nIndex=-4) returned 2002171904 [0151.686] SetWindowLongW (hWnd=0x101c4, nIndex=-4, dwNewLong=81804038) returned 2002171904 [0151.686] GetWindowLongW (hWnd=0x101c4, nIndex=-4) returned 81804038 [0151.686] GetWindowLongW (hWnd=0x101c4, nIndex=-16) returned 1174470667 [0151.686] GetWindowLongW (hWnd=0x101c4, nIndex=-12) returned 0 [0151.686] SetWindowLongW (hWnd=0x101c4, nIndex=-12, dwNewLong=65988) returned 0 [0151.686] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x81, wParam=0x0, lParam=0xb7e2e0) returned 0x1 [0151.686] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x83, wParam=0x0, lParam=0xb7e2cc) returned 0x0 [0151.686] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x1, wParam=0x0, lParam=0xb7e2e0) returned 0x0 [0151.686] GetWindow (hWnd=0x101c4, uCmd=0x3) returned 0x101c2 [0151.686] GetClientRect (in: hWnd=0x101c4, lpRect=0xb7dfe4 | out: lpRect=0xb7dfe4) returned 1 [0151.686] GetWindowRect (in: hWnd=0x101c4, lpRect=0xb7dfe4 | out: lpRect=0xb7dfe4) returned 1 [0151.686] GetParent (hWnd=0x101c4) returned 0x101a0 [0151.686] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7dfe4, cPoints=0x2 | out: lpPoints=0xb7dfe4) returned -3342365 [0151.687] SetWindowTextW (hWnd=0x101c4, lpString="Decrypt") returned 1 [0151.687] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0xc, wParam=0x0, lParam=0x2969e68) returned 0x1 [0151.687] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x5, wParam=0x0, lParam=0x2402c7) returned 0x0 [0151.687] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x3, wParam=0x0, lParam=0x15f000e) returned 0x0 [0151.687] GetClientRect (in: hWnd=0x101c4, lpRect=0xb7e040 | out: lpRect=0xb7e040) returned 1 [0151.687] GetWindowRect (in: hWnd=0x101c4, lpRect=0xb7e040 | out: lpRect=0xb7e040) returned 1 [0151.687] GetParent (hWnd=0x101c4) returned 0x101a0 [0151.687] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x101a0, lpPoints=0xb7e040, cPoints=0x2 | out: lpPoints=0xb7e040) returned -3342365 [0151.687] SendMessageW (hWnd=0x101c4, Msg=0x2210, wParam=0x1c40001, lParam=0x101c4) returned 0x0 [0151.687] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x2210, wParam=0x1c40001, lParam=0x101c4) returned 0x0 [0151.687] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0151.687] GetParent (hWnd=0x101c4) returned 0x101a0 [0151.688] GetWindowTextLengthW (hWnd=0x101a0) returned 15 [0151.688] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0151.688] GetSystemMetrics (nIndex=42) returned 0 [0151.688] GetWindowTextW (in: hWnd=0x101a0, lpString=0xb7e840, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0151.688] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xd, wParam=0x10, lParam=0xb7e840) returned 0xf [0151.702] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0xb7e87c | out: phkResult=0xb7e87c*=0x294) returned 0x0 [0151.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0xb7e314, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0151.703] RegQueryValueExW (in: hKey=0x294, lpValueName="#Decryptor", lpReserved=0x0, lpType=0xb7e878, lpData=0x0, lpcbData=0xb7e874*=0x0 | out: lpType=0xb7e878*=0x1, lpData=0x0, lpcbData=0xb7e874*=0x58) returned 0x0 [0151.703] RegSetValueExW (in: hKey=0x294, lpValueName="#Decryptor", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", cbData=0x58 | out: lpData="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe") returned 0x0 [0151.704] SendMessageW (hWnd=0x101c0, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0151.704] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0151.705] GetStockObject (i=5) returned 0x1900015 [0151.705] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.705] CoTaskMemAlloc (cb=0x5c) returned 0xd7dbe8 [0151.705] RegisterClassW (lpWndClass=0xb7e710) returned 0xc13f [0151.705] CoTaskMemFree (pv=0xd7dbe8) [0151.705] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0151.705] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.2bf8098_r11_ad1", lpWindowName="TimerNativeWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x990000, lpParam=0x0) returned 0x101c6 [0151.706] SetWindowLongW (hWnd=0x101c6, nIndex=-4, dwNewLong=1960951274) returned 81803558 [0151.706] GetWindowLongW (hWnd=0x101c6, nIndex=-4) returned 1960951274 [0151.706] SetWindowLongW (hWnd=0x101c6, nIndex=-4, dwNewLong=81803318) returned 1960951274 [0151.706] GetWindowLongW (hWnd=0x101c6, nIndex=-4) returned 81803318 [0151.706] GetWindowLongW (hWnd=0x101c6, nIndex=-16) returned 79691776 [0151.706] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101c6, Msg=0x24, wParam=0x0, lParam=0xb7e29c) returned 0x0 [0151.706] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101c6, Msg=0x81, wParam=0x0, lParam=0xb7e290) returned 0x1 [0151.706] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101c6, Msg=0x83, wParam=0x0, lParam=0xb7e27c) returned 0x0 [0151.706] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101c6, Msg=0x1, wParam=0x0, lParam=0xb7e290) returned 0x0 [0151.707] SetTimer (hWnd=0x101c6, nIDEvent=0x1, uElapse=0x64, lpTimerFunc=0x0) returned 0x1 [0151.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0xb7e314, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0151.707] CoTaskMemAlloc (cb=0x20c) returned 0xda0000 [0151.707] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0xda0000 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Desktop") returned 0x0 [0151.709] CoTaskMemFree (pv=0xda0000) [0151.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0xb7e300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0151.710] CoTaskMemAlloc (cb=0x20c) returned 0xda0000 [0151.710] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0xda0000 | out: pszPath="C:\\Users\\5JgHKoaOfdp\\Desktop") returned 0x0 [0151.710] CoTaskMemFree (pv=0xda0000) [0151.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop", nBufferLength=0x105, lpBuffer=0xb7e300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop", lpFilePart=0x0) returned 0x1c [0151.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", nBufferLength=0x105, lpBuffer=0xb7e368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe", lpFilePart=0x0) returned 0x2b [0151.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb7e7e8) returned 1 [0151.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\5JgHKoaOfdp\\Desktop\\#Decryptor.exe" (normalized: "c:\\users\\5jghkoaofdp\\desktop\\#decryptor.exe"), fInfoLevelId=0x0, lpFileInformation=0xb7e864 | out: lpFileInformation=0xb7e864*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713a8ae4, ftCreationTime.dwHighDateTime=0x1d38ea5, ftLastAccessTime.dwLowDateTime=0x713f4fc3, ftLastAccessTime.dwHighDateTime=0x1d38ea5, ftLastWriteTime.dwLowDateTime=0x714414d6, ftLastWriteTime.dwHighDateTime=0x1d38ea5, nFileSizeHigh=0x0, nFileSizeLow=0x62405)) returned 1 [0151.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb7e7e4) returned 1 [0151.735] GetWindowTextLengthW (hWnd=0x101be) returned 33 [0151.735] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x21 [0151.735] GetSystemMetrics (nIndex=42) returned 0 [0151.735] GetWindowTextW (in: hWnd=0x101be, lpString=0xb7e7c0, nMaxCount=34 | out: lpString="Destruction de fichier prevue le ") returned 33 [0151.735] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0xd, wParam=0x22, lParam=0xb7e7c0) returned 0x21 [0151.735] GetWindowTextLengthW (hWnd=0x101be) returned 33 [0151.735] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x21 [0151.735] GetSystemMetrics (nIndex=42) returned 0 [0151.735] GetWindowTextW (in: hWnd=0x101be, lpString=0xb7e7bc, nMaxCount=34 | out: lpString="Destruction de fichier prevue le ") returned 33 [0151.735] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0xd, wParam=0x22, lParam=0xb7e7bc) returned 0x21 [0151.735] SetWindowTextW (hWnd=0x101be, lpString="Your files will deleted after 29 days") returned 1 [0151.735] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0xc, wParam=0x0, lParam=0x29819d8) returned 0x1 [0151.735] InvalidateRect (hWnd=0x101be, lpRect=0x0, bErase=1) returned 1 [0151.736] SetForegroundWindow (hWnd=0x101a0) returned 0 [0151.736] InvalidateRect (hWnd=0x101a4, lpRect=0x0, bErase=1) returned 1 [0151.736] InvalidateRect (hWnd=0x101a6, lpRect=0xb7e824, bErase=1) returned 1 [0151.737] InvalidateRect (hWnd=0x101aa, lpRect=0x0, bErase=1) returned 1 [0151.737] InvalidateRect (hWnd=0x101ae, lpRect=0xb7e824, bErase=0) returned 1 [0151.737] InvalidateRect (hWnd=0x101b2, lpRect=0x0, bErase=1) returned 1 [0151.737] InvalidateRect (hWnd=0x101b6, lpRect=0x0, bErase=1) returned 1 [0151.737] InvalidateRect (hWnd=0x101b8, lpRect=0xb7e824, bErase=1) returned 1 [0151.737] InvalidateRect (hWnd=0x101bc, lpRect=0x0, bErase=1) returned 1 [0151.737] InvalidateRect (hWnd=0x101c2, lpRect=0x0, bErase=1) returned 1 [0151.737] InvalidateRect (hWnd=0x101c4, lpRect=0x0, bErase=0) returned 1 [0151.737] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0xb7e8bc | out: lpdwProcessId=0xb7e8bc) returned 0x77c [0151.737] GetCurrentThreadId () returned 0x77c [0151.738] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc140 [0151.738] PostMessageW (hWnd=0x101a0, Msg=0xc140, wParam=0x0, lParam=0x0) returned 1 [0151.738] GetWindowTextLengthW (hWnd=0x101a0) returned 15 [0151.738] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0151.738] GetSystemMetrics (nIndex=42) returned 0 [0151.738] GetWindowTextW (in: hWnd=0x101a0, lpString=0xb7e828, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0151.738] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xd, wParam=0x10, lParam=0xb7e828) returned 0xf [0151.738] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x46, wParam=0x0, lParam=0xb7ec70) returned 0x0 [0151.751] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.751] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0151.751] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0151.751] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0151.751] GetWindowPlacement (in: hWnd=0x101a0, lpwndpl=0xb7ea20 | out: lpwndpl=0xb7ea20) returned 1 [0151.751] GetClientRect (in: hWnd=0x101a0, lpRect=0xb7e9cc | out: lpRect=0xb7e9cc) returned 1 [0151.751] GetWindowTextLengthW (hWnd=0x101a0) returned 15 [0151.751] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0151.751] GetSystemMetrics (nIndex=42) returned 0 [0151.751] GetWindowTextW (in: hWnd=0x101a0, lpString=0xb7e884, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0151.751] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xd, wParam=0x10, lParam=0xb7e884) returned 0xf [0151.751] GetClientRect (in: hWnd=0x101a0, lpRect=0xb7e8d4 | out: lpRect=0xb7e8d4) returned 1 [0151.752] GetSystemMetrics (nIndex=80) returned 1 [0151.753] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x4e038fe, dwData=0x0) returned 1 [0151.753] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xb7e548 | out: lpmi=0xb7e548) returned 1 [0151.753] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xa010588 [0151.753] GetDeviceCaps (hdc=0xa010588, index=12) returned 32 [0151.753] GetDeviceCaps (hdc=0xa010588, index=14) returned 1 [0151.754] DeleteDC (hdc=0xa010588) returned 1 [0151.754] GetCurrentObject (hdc=0x180106e6, type=0x1) returned 0x1b00017 [0151.754] GetCurrentObject (hdc=0x180106e6, type=0x2) returned 0x1900010 [0151.754] GetCurrentObject (hdc=0x180106e6, type=0x7) returned 0x205056d [0151.754] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x18a0048 [0151.754] SaveDC (hdc=0x180106e6) returned 1 [0151.754] GetNearestColor (hdc=0x180106e6, color=0x0) returned 0x0 [0151.754] CreateSolidBrush (color=0x0) returned 0x47100572 [0151.754] FillRect (hDC=0x180106e6, lprc=0xb7e774, hbr=0x47100572) returned 1 [0151.754] DeleteObject (ho=0x47100572) returned 1 [0151.754] RestoreDC (hdc=0x180106e6, nSavedDC=-1) returned 1 [0151.762] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.762] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.762] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.762] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x14, wParam=0x8010579, lParam=0x0) returned 0x1 [0151.762] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.762] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.762] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x14, wParam=0x8010579, lParam=0x0) returned 0x1 [0151.762] GetStockObject (i=5) returned 0x1900015 [0151.762] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.763] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.763] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.763] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.763] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x14, wParam=0x8010579, lParam=0x0) returned 0x1 [0151.763] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.763] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.763] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.764] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x14, wParam=0x8010579, lParam=0x0) returned 0x1 [0151.764] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.764] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.764] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.764] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x14, wParam=0x8010579, lParam=0x0) returned 0x1 [0151.764] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.764] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x14, wParam=0x8010579, lParam=0x0) returned 0x1 [0151.764] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.764] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x14, wParam=0x8010579, lParam=0x0) returned 0x1 [0151.764] GetStockObject (i=5) returned 0x1900015 [0151.765] GetWindowPlacement (in: hWnd=0x101a0, lpwndpl=0xb7ea04 | out: lpwndpl=0xb7ea04) returned 1 [0151.765] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x47, wParam=0x0, lParam=0xb7ec70) returned 0x0 [0151.765] GetClientRect (in: hWnd=0x101a0, lpRect=0xb7e9b4 | out: lpRect=0xb7e9b4) returned 1 [0151.765] GetWindowRect (in: hWnd=0x101a0, lpRect=0xb7e9b4 | out: lpRect=0xb7e9b4) returned 1 [0151.765] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0151.765] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0151.765] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0151.765] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x5, wParam=0x0, lParam=0x1c302ec) returned 0x0 [0151.765] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x3, wParam=0x0, lParam=0x34001d) returned 0x0 [0151.765] GetClientRect (in: hWnd=0x101a0, lpRect=0xb7e9e4 | out: lpRect=0xb7e9e4) returned 1 [0151.765] GetWindowRect (in: hWnd=0x101a0, lpRect=0xb7e9e4 | out: lpRect=0xb7e9e4) returned 1 [0151.765] InvalidateRect (hWnd=0x101c4, lpRect=0x0, bErase=0) returned 1 [0151.765] GetFocus () returned 0x101a0 [0151.765] SetFocus (hWnd=0x101c4) returned 0x101a0 [0151.765] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x8, wParam=0x101c4, lParam=0x0) returned 0x0 [0151.766] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0151.766] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0151.766] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0151.766] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x7, wParam=0x101a0, lParam=0x0) returned 0x0 [0151.766] GetStockObject (i=5) returned 0x1900015 [0151.766] GetDlgItem (hDlg=0x101a0, nIDDlgItem=65988) returned 0x101c4 [0151.766] SendMessageW (hWnd=0x101c4, Msg=0x202b, wParam=0x101c4, lParam=0xb7e6c4) returned 0x0 [0151.766] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x202b, wParam=0x101c4, lParam=0xb7e6c4) returned 0x0 [0151.766] InvalidateRect (hWnd=0x101c4, lpRect=0x0, bErase=0) returned 1 [0151.766] GetFocus () returned 0x101c4 [0151.767] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.767] IsWindowUnicode (hWnd=0x101a0) returned 1 [0151.767] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.768] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.768] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.768] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0151.768] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.768] IsWindowUnicode (hWnd=0x101a0) returned 1 [0151.768] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.768] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.768] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.768] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.768] IsWindowUnicode (hWnd=0x101a0) returned 1 [0151.768] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.768] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.768] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.769] BeginPaint (in: hWnd=0x101a0, lpPaint=0xb7e868 | out: lpPaint=0xb7e868) returned 0x180106e6 [0151.769] GdipCreateHalftonePalette () returned 0x30080588 [0151.769] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.769] GetWindowTextLengthW (hWnd=0x101a0) returned 15 [0151.769] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0151.769] GetSystemMetrics (nIndex=42) returned 0 [0151.769] GetWindowTextW (in: hWnd=0x101a0, lpString=0xb7e7f0, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0151.769] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xd, wParam=0x10, lParam=0xb7e7f0) returned 0xf [0151.769] SelectPalette (hdc=0x180106e6, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.769] EndPaint (hWnd=0x101a0, lpPaint=0xb7e864) returned 1 [0151.769] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.770] IsWindowUnicode (hWnd=0x101a4) returned 1 [0151.770] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.770] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.770] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.770] BeginPaint (in: hWnd=0x101a4, lpPaint=0xb7e87c | out: lpPaint=0xb7e87c) returned 0x180106e6 [0151.770] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.770] GetWindowTextLengthW (hWnd=0x101a4) returned 7 [0151.770] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0151.770] GetSystemMetrics (nIndex=42) returned 0 [0151.770] GetWindowTextW (in: hWnd=0x101a4, lpString=0xb7e820, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0151.770] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0xd, wParam=0x8, lParam=0xb7e820) returned 0x7 [0151.770] GetClientRect (in: hWnd=0x101a4, lpRect=0xb7e8dc | out: lpRect=0xb7e8dc) returned 1 [0151.770] GetCurrentObject (hdc=0x180106e6, type=0x1) returned 0x1b00017 [0151.770] GetCurrentObject (hdc=0x180106e6, type=0x2) returned 0x1900010 [0151.770] GetCurrentObject (hdc=0x180106e6, type=0x7) returned 0x205056d [0151.770] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x18a0048 [0151.770] SaveDC (hdc=0x180106e6) returned 1 [0151.770] GetNearestColor (hdc=0x180106e6, color=0x0) returned 0x0 [0151.771] CreateSolidBrush (color=0x0) returned 0x48100572 [0151.771] FillRect (hDC=0x180106e6, lprc=0xb7e77c, hbr=0x48100572) returned 1 [0151.771] DeleteObject (ho=0x48100572) returned 1 [0151.771] RestoreDC (hdc=0x180106e6, nSavedDC=-1) returned 1 [0151.771] GetWindowTextLengthW (hWnd=0x101a4) returned 7 [0151.771] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0151.771] GetSystemMetrics (nIndex=42) returned 0 [0151.771] GetWindowTextW (in: hWnd=0x101a4, lpString=0xb7e820, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0151.771] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0xd, wParam=0x8, lParam=0xb7e820) returned 0x7 [0151.772] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0xb7e7dc, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96]qv3ÏÏÈ\x8bnt\x0cê·", lpUsedDefaultChar=0x0) returned 17 [0151.772] GetProcAddress (hModule=0x75810000, lpProcName="ImageList_WriteEx") returned 0x0 [0151.772] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=1) returned 0x30080588 [0151.772] GdipCreateFromHDC (hdc=0x180106e6, graphics=0xb7e700) returned 0x0 [0151.772] GdipSetPageUnit (graphics=0x50186d8, unit=0x2) returned 0x0 [0151.772] GdipCreateMatrix (matrix=0xb7e6c0) returned 0x0 [0151.773] GdipGetWorldTransform (graphics=0x50186d8, matrix=0x50133e8) returned 0x0 [0151.773] GdipIsMatrixIdentity (matrix=0x50133e8, result=0xb7e6d8) returned 0x0 [0151.773] GdipDeleteMatrix (matrix=0x50133e8) returned 0x0 [0151.773] GdipCreateRegion (region=0xb7e6c0) returned 0x0 [0151.773] GdipGetClip (graphics=0x50186d8, region=0x5013418) returned 0x0 [0151.773] GdipIsInfiniteRegion (region=0x5013418, graphics=0x50186d8, result=0xb7e6cc) returned 0x0 [0151.773] GdipDeleteRegion (region=0x5013418) returned 0x0 [0151.773] GdipSaveGraphics (graphics=0x50186d8, state=0xb7e6f8) returned 0x0 [0151.774] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0xb7e6dc) returned 0x0 [0151.774] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0xb7e6dc) returned 0x0 [0151.774] GdipCreateRegion (region=0xb7e67c) returned 0x0 [0151.774] GdipGetClip (graphics=0x50186d8, region=0x5018d38) returned 0x0 [0151.774] GdipCreateMatrix (matrix=0xb7e67c) returned 0x0 [0151.774] GdipGetWorldTransform (graphics=0x50186d8, matrix=0x5013678) returned 0x0 [0151.774] GdipIsMatrixIdentity (matrix=0x5013678, result=0xb7e694) returned 0x0 [0151.774] GdipGetMatrixElements (matrix=0x5013678, matrixOut=0xd670f8) returned 0x0 [0151.775] LocalFree (hMem=0xd670f8) returned 0x0 [0151.775] GdipDeleteMatrix (matrix=0x5013678) returned 0x0 [0151.775] GdipIsInfiniteRegion (region=0x5018d38, graphics=0x50186d8, result=0xb7e6c0) returned 0x0 [0151.775] GdipDeleteRegion (region=0x5018d38) returned 0x0 [0151.775] GdipGetDC (graphics=0x50186d8, hdc=0xb7e6c8) returned 0x0 [0151.775] GetCurrentObject (hdc=0x180106e6, type=0x1) returned 0x1b00017 [0151.775] GetCurrentObject (hdc=0x180106e6, type=0x2) returned 0x1900010 [0151.775] GetCurrentObject (hdc=0x180106e6, type=0x7) returned 0x205056d [0151.775] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x18a0048 [0151.775] SaveDC (hdc=0x180106e6) returned 1 [0151.775] OffsetViewportOrgEx (in: hdc=0x180106e6, x=0, y=0, lppt=0x2983098 | out: lppt=0x2983098) returned 1 [0151.775] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0xb7e700, fWinIni=0x0 | out: pvParam=0xb7e700) returned 1 [0151.775] SendMessageW (hWnd=0x101a0, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0151.775] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0151.775] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.775] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.775] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.776] GetStockObject (i=5) returned 0x1900015 [0151.776] GetDlgItem (hDlg=0x101a4, nIDDlgItem=65958) returned 0x101a6 [0151.776] SendMessageW (hWnd=0x101a6, Msg=0x202b, wParam=0x101a6, lParam=0xb7d33c) returned 0x0 [0151.776] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0x202b, wParam=0x101a6, lParam=0xb7d33c) returned 0x0 [0151.776] RedrawWindow (hWnd=0x101a6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.776] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.776] RedrawWindow (hWnd=0x101a8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.776] RedrawWindow (hWnd=0x101a4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.776] InvalidateRect (hWnd=0x101a6, lpRect=0xb7d9a0, bErase=1) returned 1 [0151.776] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.776] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.776] GetStockObject (i=5) returned 0x1900015 [0151.776] GetStockObject (i=5) returned 0x1900015 [0151.776] GetDlgItem (hDlg=0x101aa, nIDDlgItem=65964) returned 0x101ac [0151.776] SendMessageW (hWnd=0x101ac, Msg=0x202b, wParam=0x101ac, lParam=0xb7d2fc) returned 0x0 [0151.776] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x202b, wParam=0x101ac, lParam=0xb7d2fc) returned 0x0 [0151.776] RedrawWindow (hWnd=0x101ac, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.776] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.776] GetStockObject (i=5) returned 0x1900015 [0151.776] GetDlgItem (hDlg=0x101aa, nIDDlgItem=65966) returned 0x101ae [0151.776] SendMessageW (hWnd=0x101ae, Msg=0x202b, wParam=0x101ae, lParam=0xb7d334) returned 0x0 [0151.776] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x202b, wParam=0x101ae, lParam=0xb7d334) returned 0x0 [0151.776] RedrawWindow (hWnd=0x101ae, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.776] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.777] GetStockObject (i=5) returned 0x1900015 [0151.777] GetDlgItem (hDlg=0x101aa, nIDDlgItem=65968) returned 0x101b0 [0151.777] SendMessageW (hWnd=0x101b0, Msg=0x202b, wParam=0x101b0, lParam=0xb7d33c) returned 0x0 [0151.777] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x202b, wParam=0x101b0, lParam=0xb7d33c) returned 0x0 [0151.777] RedrawWindow (hWnd=0x101b0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.777] RedrawWindow (hWnd=0x101aa, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.777] InvalidateRect (hWnd=0x101ae, lpRect=0xb7d9a0, bErase=0) returned 1 [0151.777] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.777] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.777] RedrawWindow (hWnd=0x101b4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.777] RedrawWindow (hWnd=0x101b2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.777] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.777] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.777] GetStockObject (i=5) returned 0x1900015 [0151.777] GetDlgItem (hDlg=0x101b6, nIDDlgItem=65976) returned 0x101b8 [0151.777] SendMessageW (hWnd=0x101b8, Msg=0x202b, wParam=0x101b8, lParam=0xb7d33c) returned 0x0 [0151.777] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0x202b, wParam=0x101b8, lParam=0xb7d33c) returned 0x0 [0151.777] RedrawWindow (hWnd=0x101b8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.777] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.777] RedrawWindow (hWnd=0x101ba, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.777] RedrawWindow (hWnd=0x101b6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.777] InvalidateRect (hWnd=0x101b8, lpRect=0xb7d9a0, bErase=1) returned 1 [0151.778] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.778] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.778] GetStockObject (i=5) returned 0x1900015 [0151.778] GetDlgItem (hDlg=0x101bc, nIDDlgItem=65982) returned 0x101be [0151.778] SendMessageW (hWnd=0x101be, Msg=0x202b, wParam=0x101be, lParam=0xb7d33c) returned 0x0 [0151.778] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x202b, wParam=0x101be, lParam=0xb7d33c) returned 0x0 [0151.778] RedrawWindow (hWnd=0x101be, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.778] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.778] RedrawWindow (hWnd=0x101c0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.778] RedrawWindow (hWnd=0x101bc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.778] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.778] RedrawWindow (hWnd=0x101c2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.778] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0151.778] GetStockObject (i=5) returned 0x1900015 [0151.778] GetStockObject (i=5) returned 0x1900015 [0151.778] GetDlgItem (hDlg=0x101a0, nIDDlgItem=65988) returned 0x101c4 [0151.778] SendMessageW (hWnd=0x101c4, Msg=0x202b, wParam=0x101c4, lParam=0xb7d7d4) returned 0x0 [0151.778] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x202b, wParam=0x101c4, lParam=0xb7d7d4) returned 0x0 [0151.778] RedrawWindow (hWnd=0x101c4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.778] RedrawWindow (hWnd=0x101a0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0151.779] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x18a0048 [0151.779] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e5a8 | out: pv=0xb7e5a8) returned 92 [0151.779] SelectObject (hdc=0x180106e6, h=0x5a0a06d6) returned 0x18a0048 [0151.779] DrawTextExW (in: hdc=0x180106e6, lpchText="Decrypt", cchText=7, lprc=0xb7e6e4, format=0x102410, lpdtp=0x298339c | out: lpchText="Decrypt", lprc=0xb7e6e4) returned 13 [0151.779] GetTextAlign (hdc=0x180106e6) returned 0x0 [0151.780] GetTextColor (hdc=0x180106e6) returned 0x0 [0151.780] SetTextColor (hdc=0x180106e6, color=0xf0f0f0) returned 0x0 [0151.780] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x5a0a06d6 [0151.780] GetObjectW (in: h=0x5a0a06d6, c=92, pv=0xb7e454 | out: pv=0xb7e454) returned 92 [0151.780] GetBkMode (hdc=0x180106e6) returned 2 [0151.780] SetBkMode (hdc=0x180106e6, mode=1) returned 2 [0151.780] DrawTextExW (in: hdc=0x180106e6, lpchText="Decrypt", cchText=7, lprc=0xb7e688, format=0x102010, lpdtp=0x2983564 | out: lpchText="Decrypt", lprc=0xb7e688) returned 13 [0151.780] RestoreDC (hdc=0x180106e6, nSavedDC=-1) returned 1 [0151.781] GdipReleaseDC (graphics=0x50186d8, hdc=0x180106e6) returned 0x0 [0151.781] GetDC (hWnd=0x0) returned 0x8010579 [0151.781] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e67c) returned 0x0 [0151.781] GdipGetFontHeight (font=0x28bef18, graphics=0x5018d38, height=0xb7e674) returned 0x0 [0151.781] GdipDeleteGraphics (graphics=0x5018d38) returned 0x0 [0151.781] ReleaseDC (hWnd=0x0, hDC=0x8010579) returned 1 [0151.781] GdipDrawLineI (graphics=0x50186d8, pen=0x50189b8, x1=1, y1=6, x2=1, y2=59) returned 0x0 [0151.782] GdipDrawLineI (graphics=0x50186d8, pen=0x5018b78, x1=0, y1=6, x2=0, y2=58) returned 0x0 [0151.782] GdipDrawLineI (graphics=0x50186d8, pen=0x50189b8, x1=0, y1=59, x2=711, y2=59) returned 0x0 [0151.783] GdipDrawLineI (graphics=0x50186d8, pen=0x5018b78, x1=0, y1=58, x2=710, y2=58) returned 0x0 [0151.783] GdipDrawLineI (graphics=0x50186d8, pen=0x5018b78, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0151.783] GdipDrawLineI (graphics=0x50186d8, pen=0x50189b8, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0151.783] GdipDrawLineI (graphics=0x50186d8, pen=0x5018b78, x1=52, y1=5, x2=709, y2=5) returned 0x0 [0151.783] GdipDrawLineI (graphics=0x50186d8, pen=0x50189b8, x1=52, y1=6, x2=710, y2=6) returned 0x0 [0151.784] GdipDrawLineI (graphics=0x50186d8, pen=0x50189b8, x1=710, y1=5, x2=710, y2=59) returned 0x0 [0151.784] GdipDrawLineI (graphics=0x50186d8, pen=0x5018b78, x1=709, y1=6, x2=709, y2=58) returned 0x0 [0151.784] GdipDeletePen (pen=0x50189b8) returned 0x0 [0151.784] GdipDeletePen (pen=0x5018b78) returned 0x0 [0151.784] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.784] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=0) returned 0x30080588 [0151.784] SelectPalette (hdc=0x180106e6, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.784] EndPaint (hWnd=0x101a4, lpPaint=0xb7e878) returned 1 [0151.784] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.784] IsWindowUnicode (hWnd=0x101a0) returned 1 [0151.784] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.784] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.784] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.784] BeginPaint (in: hWnd=0x101a0, lpPaint=0xb7e868 | out: lpPaint=0xb7e868) returned 0x180106e6 [0151.784] GetWindowPlacement (in: hWnd=0x101a0, lpwndpl=0xb7e5b4 | out: lpwndpl=0xb7e5b4) returned 1 [0151.784] GetClientRect (in: hWnd=0x101a0, lpRect=0xb7e560 | out: lpRect=0xb7e560) returned 1 [0151.784] GetWindowTextLengthW (hWnd=0x101a0) returned 15 [0151.784] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0151.784] GetSystemMetrics (nIndex=42) returned 0 [0151.784] GetWindowTextW (in: hWnd=0x101a0, lpString=0xb7e418, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0151.784] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xd, wParam=0x10, lParam=0xb7e418) returned 0xf [0151.785] GetClientRect (in: hWnd=0x101a0, lpRect=0xb7e468 | out: lpRect=0xb7e468) returned 1 [0151.785] GetCurrentObject (hdc=0x180106e6, type=0x1) returned 0x1b00017 [0151.785] GetCurrentObject (hdc=0x180106e6, type=0x2) returned 0x1900010 [0151.785] GetCurrentObject (hdc=0x180106e6, type=0x7) returned 0x205056d [0151.785] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x18a0048 [0151.785] SaveDC (hdc=0x180106e6) returned 1 [0151.785] GetNearestColor (hdc=0x180106e6, color=0x0) returned 0x0 [0151.785] CreateSolidBrush (color=0x0) returned 0x49100572 [0151.785] FillRect (hDC=0x180106e6, lprc=0xb7e308, hbr=0x49100572) returned 1 [0151.785] DeleteObject (ho=0x49100572) returned 1 [0151.785] RestoreDC (hdc=0x180106e6, nSavedDC=-1) returned 1 [0151.785] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.785] GetWindowTextLengthW (hWnd=0x101a0) returned 15 [0151.785] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0151.785] GetSystemMetrics (nIndex=42) returned 0 [0151.785] GetWindowTextW (in: hWnd=0x101a0, lpString=0xb7e7f0, nMaxCount=16 | out: lpString="#Lime Decryptor") returned 15 [0151.785] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xd, wParam=0x10, lParam=0xb7e7f0) returned 0xf [0151.785] SelectPalette (hdc=0x180106e6, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.785] EndPaint (hWnd=0x101a0, lpPaint=0xb7e864) returned 1 [0151.785] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.785] IsWindowUnicode (hWnd=0x101a4) returned 1 [0151.785] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.785] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.785] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.785] BeginPaint (in: hWnd=0x101a4, lpPaint=0xb7e87c | out: lpPaint=0xb7e87c) returned 0x180106e6 [0151.785] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.785] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.785] GetWindowTextLengthW (hWnd=0x101a4) returned 7 [0151.785] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0151.786] GetSystemMetrics (nIndex=42) returned 0 [0151.786] GetWindowTextW (in: hWnd=0x101a4, lpString=0xb7e820, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0151.786] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0xd, wParam=0x8, lParam=0xb7e820) returned 0x7 [0151.786] GetClientRect (in: hWnd=0x101a4, lpRect=0xb7e8dc | out: lpRect=0xb7e8dc) returned 1 [0151.786] GetCurrentObject (hdc=0x180106e6, type=0x1) returned 0x1b00017 [0151.786] GetCurrentObject (hdc=0x180106e6, type=0x2) returned 0x1900010 [0151.787] GetCurrentObject (hdc=0x180106e6, type=0x7) returned 0x205056d [0151.787] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x18a0048 [0151.787] SaveDC (hdc=0x180106e6) returned 1 [0151.787] GetNearestColor (hdc=0x180106e6, color=0x0) returned 0x0 [0151.787] CreateSolidBrush (color=0x0) returned 0x4a100572 [0151.787] FillRect (hDC=0x180106e6, lprc=0xb7e77c, hbr=0x4a100572) returned 1 [0151.787] DeleteObject (ho=0x4a100572) returned 1 [0151.787] RestoreDC (hdc=0x180106e6, nSavedDC=-1) returned 1 [0151.787] GetWindowTextLengthW (hWnd=0x101a4) returned 7 [0151.787] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0151.787] GetSystemMetrics (nIndex=42) returned 0 [0151.787] GetWindowTextW (in: hWnd=0x101a4, lpString=0xb7e820, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0151.787] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0xd, wParam=0x8, lParam=0xb7e820) returned 0x7 [0151.788] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0xb7e7dc, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96]qv3ÏÏÈ\x8bnt\x0cê·", lpUsedDefaultChar=0x0) returned 17 [0151.788] GetProcAddress (hModule=0x75810000, lpProcName="ImageList_WriteEx") returned 0x0 [0151.788] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=1) returned 0x30080588 [0151.788] GdipCreateFromHDC (hdc=0x180106e6, graphics=0xb7e700) returned 0x0 [0151.788] GdipSetPageUnit (graphics=0x50186d8, unit=0x2) returned 0x0 [0151.788] GdipCreateMatrix (matrix=0xb7e6c0) returned 0x0 [0151.788] GdipGetWorldTransform (graphics=0x50186d8, matrix=0x50189b8) returned 0x0 [0151.788] GdipIsMatrixIdentity (matrix=0x50189b8, result=0xb7e6d8) returned 0x0 [0151.788] GdipDeleteMatrix (matrix=0x50189b8) returned 0x0 [0151.788] GdipCreateRegion (region=0xb7e6c0) returned 0x0 [0151.788] GdipGetClip (graphics=0x50186d8, region=0x50189e8) returned 0x0 [0151.788] GdipIsInfiniteRegion (region=0x50189e8, graphics=0x50186d8, result=0xb7e6cc) returned 0x0 [0151.788] GdipDeleteRegion (region=0x50189e8) returned 0x0 [0151.788] GdipSaveGraphics (graphics=0x50186d8, state=0xb7e6f8) returned 0x0 [0151.788] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0xb7e6dc) returned 0x0 [0151.788] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0xb7e6dc) returned 0x0 [0151.788] GdipCreateRegion (region=0xb7e67c) returned 0x0 [0151.788] GdipGetClip (graphics=0x50186d8, region=0x5018c98) returned 0x0 [0151.788] GdipCreateMatrix (matrix=0xb7e67c) returned 0x0 [0151.788] GdipGetWorldTransform (graphics=0x50186d8, matrix=0x5013678) returned 0x0 [0151.788] GdipIsMatrixIdentity (matrix=0x5013678, result=0xb7e694) returned 0x0 [0151.788] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.788] GdipGetMatrixElements (matrix=0x5013678, matrixOut=0xd670f8) returned 0x0 [0151.789] LocalFree (hMem=0xd670f8) returned 0x0 [0151.789] GdipDeleteMatrix (matrix=0x5013678) returned 0x0 [0151.789] GdipIsInfiniteRegion (region=0x5018c98, graphics=0x50186d8, result=0xb7e6c0) returned 0x0 [0151.789] GdipDeleteRegion (region=0x5018c98) returned 0x0 [0151.789] GdipGetDC (graphics=0x50186d8, hdc=0xb7e6c8) returned 0x0 [0151.789] GetCurrentObject (hdc=0x180106e6, type=0x1) returned 0x1b00017 [0151.789] GetCurrentObject (hdc=0x180106e6, type=0x2) returned 0x1900010 [0151.789] GetCurrentObject (hdc=0x180106e6, type=0x7) returned 0x205056d [0151.789] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x18a0048 [0151.789] SaveDC (hdc=0x180106e6) returned 1 [0151.789] OffsetViewportOrgEx (in: hdc=0x180106e6, x=0, y=0, lppt=0x2983ec4 | out: lppt=0x2983ec4) returned 1 [0151.789] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x18a0048 [0151.789] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e5a8 | out: pv=0xb7e5a8) returned 92 [0151.789] SelectObject (hdc=0x180106e6, h=0x5a0a06d6) returned 0x18a0048 [0151.789] DrawTextExW (in: hdc=0x180106e6, lpchText="Decrypt", cchText=7, lprc=0xb7e6e4, format=0x102410, lpdtp=0x2983ed4 | out: lpchText="Decrypt", lprc=0xb7e6e4) returned 13 [0151.789] GetTextAlign (hdc=0x180106e6) returned 0x0 [0151.789] GetTextColor (hdc=0x180106e6) returned 0x0 [0151.789] SetTextColor (hdc=0x180106e6, color=0xf0f0f0) returned 0x0 [0151.789] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x5a0a06d6 [0151.789] GetObjectW (in: h=0x5a0a06d6, c=92, pv=0xb7e454 | out: pv=0xb7e454) returned 92 [0151.789] GetBkMode (hdc=0x180106e6) returned 2 [0151.789] SetBkMode (hdc=0x180106e6, mode=1) returned 2 [0151.789] DrawTextExW (in: hdc=0x180106e6, lpchText="Decrypt", cchText=7, lprc=0xb7e688, format=0x102010, lpdtp=0x298409c | out: lpchText="Decrypt", lprc=0xb7e688) returned 13 [0151.789] RestoreDC (hdc=0x180106e6, nSavedDC=-1) returned 1 [0151.789] GdipReleaseDC (graphics=0x50186d8, hdc=0x180106e6) returned 0x0 [0151.789] GdipDrawLineI (graphics=0x50186d8, pen=0x5018b78, x1=1, y1=6, x2=1, y2=59) returned 0x0 [0151.790] GdipDrawLineI (graphics=0x50186d8, pen=0x5018c08, x1=0, y1=6, x2=0, y2=58) returned 0x0 [0151.790] GdipDrawLineI (graphics=0x50186d8, pen=0x5018b78, x1=0, y1=59, x2=711, y2=59) returned 0x0 [0151.790] GdipDrawLineI (graphics=0x50186d8, pen=0x5018c08, x1=0, y1=58, x2=710, y2=58) returned 0x0 [0151.790] GdipDrawLineI (graphics=0x50186d8, pen=0x5018c08, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0151.790] GdipDrawLineI (graphics=0x50186d8, pen=0x5018b78, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0151.790] GdipDrawLineI (graphics=0x50186d8, pen=0x5018c08, x1=52, y1=5, x2=709, y2=5) returned 0x0 [0151.791] GdipDrawLineI (graphics=0x50186d8, pen=0x5018b78, x1=52, y1=6, x2=710, y2=6) returned 0x0 [0151.791] GdipDrawLineI (graphics=0x50186d8, pen=0x5018b78, x1=710, y1=5, x2=710, y2=59) returned 0x0 [0151.791] GdipDrawLineI (graphics=0x50186d8, pen=0x5018c08, x1=709, y1=6, x2=709, y2=58) returned 0x0 [0151.791] GdipDeletePen (pen=0x5018b78) returned 0x0 [0151.791] GdipDeletePen (pen=0x5018c08) returned 0x0 [0151.791] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.791] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=0) returned 0x30080588 [0151.791] SelectPalette (hdc=0x180106e6, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.791] EndPaint (hWnd=0x101a4, lpPaint=0xb7e878) returned 1 [0151.791] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.791] IsWindowUnicode (hWnd=0x101a6) returned 1 [0151.791] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.791] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.791] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.791] BeginPaint (in: hWnd=0x101a6, lpPaint=0xb7e84c | out: lpPaint=0xb7e84c) returned 0x180106e6 [0151.791] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.792] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.792] CreateCompatibleDC (hdc=0x180106e6) returned 0x1a010586 [0151.792] GetObjectType (h=0x180106e6) returned 0x3 [0151.792] CreateCompatibleBitmap (hdc=0x180106e6, cx=1, cy=1) returned 0x20050587 [0151.792] GetDIBits (in: hdc=0x180106e6, hbm=0x20050587, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0xb7e31c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb7e31c) returned 1 [0151.793] GetDIBits (in: hdc=0x180106e6, hbm=0x20050587, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0xb7e31c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb7e31c) returned 1 [0151.793] DeleteObject (ho=0x20050587) returned 1 [0151.793] CreateDIBSection (in: hdc=0x180106e6, lpbmi=0xb7e36c, usage=0x0, ppvBits=0xb7e860, hSection=0x0, offset=0x0 | out: ppvBits=0xb7e860) returned 0xe05058b [0151.793] SelectObject (hdc=0x1a010586, h=0xe05058b) returned 0x185000f [0151.793] GdipCreateFromHDC (hdc=0x1a010586, graphics=0xb7e844) returned 0x0 [0151.793] GdipTranslateWorldTransform (graphics=0x50186d8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0151.793] GdipSetClipRectI (graphics=0x50186d8, x=0, y=0, width=73, height=13, combineMode=0x0) returned 0x0 [0151.793] GdipCreateMatrix (matrix=0xb7e8ac) returned 0x0 [0151.793] GdipGetWorldTransform (graphics=0x50186d8, matrix=0x5018d08) returned 0x0 [0151.793] GdipIsMatrixIdentity (matrix=0x5018d08, result=0xb7e8c4) returned 0x0 [0151.793] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.793] GdipGetMatrixElements (matrix=0x5018d08, matrixOut=0xd670f8) returned 0x0 [0151.793] LocalFree (hMem=0xd670f8) returned 0x0 [0151.793] GdipDeleteMatrix (matrix=0x5018d08) returned 0x0 [0151.793] GdipCreateRegion (region=0xb7e8ac) returned 0x0 [0151.794] GdipGetClip (graphics=0x50186d8, region=0x50189b8) returned 0x0 [0151.794] GdipIsInfiniteRegion (region=0x50189b8, graphics=0x50186d8, result=0xb7e8b8) returned 0x0 [0151.794] GdipSaveGraphics (graphics=0x50186d8, state=0xb7e8e4) returned 0x0 [0151.794] GetWindowTextLengthW (hWnd=0x101a6) returned 14 [0151.794] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0151.794] GetSystemMetrics (nIndex=42) returned 0 [0151.794] GetWindowTextW (in: hWnd=0x101a6, lpString=0xb7e7e0, nMaxCount=15 | out: lpString="Enter the key:") returned 14 [0151.794] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0xd, wParam=0xf, lParam=0xb7e7e0) returned 0xe [0151.794] GetClientRect (in: hWnd=0x101a6, lpRect=0xb7e8ac | out: lpRect=0xb7e8ac) returned 1 [0151.794] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0xb7e6d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96]qv3ÏÏÈ\x8bntÜé·", lpUsedDefaultChar=0x0) returned 17 [0151.794] GetProcAddress (hModule=0x75810000, lpProcName="ImageList_WriteEx") returned 0x0 [0151.794] GdipCreateRegion (region=0xb7e6e8) returned 0x0 [0151.794] GdipGetClip (graphics=0x50186d8, region=0x5018a48) returned 0x0 [0151.794] GdipCreateMatrix (matrix=0xb7e6e8) returned 0x0 [0151.794] GdipGetWorldTransform (graphics=0x50186d8, matrix=0x5013678) returned 0x0 [0151.794] GdipIsMatrixIdentity (matrix=0x5013678, result=0xb7e700) returned 0x0 [0151.795] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.795] GdipGetMatrixElements (matrix=0x5013678, matrixOut=0xd670f8) returned 0x0 [0151.795] LocalFree (hMem=0xd670f8) returned 0x0 [0151.795] GdipCombineRegionRegion (region=0x5018a48, region2=0x50189b8, combineMode=0x1) returned 0x0 [0151.795] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.795] GdipGetMatrixElements (matrix=0x5013678, matrixOut=0xd670f8) returned 0x0 [0151.795] LocalFree (hMem=0xd670f8) returned 0x0 [0151.795] GdipDeleteMatrix (matrix=0x5013678) returned 0x0 [0151.795] GdipIsInfiniteRegion (region=0x5018a48, graphics=0x50186d8, result=0xb7e72c) returned 0x0 [0151.795] GdipIsInfiniteRegion (region=0x5018a48, graphics=0x50186d8, result=0xb7e71c) returned 0x0 [0151.795] GdipGetRegionHRgn (region=0x5018a48, graphics=0x50186d8, hRgn=0xb7e71c) returned 0x0 [0151.795] GdipDeleteRegion (region=0x5018a48) returned 0x0 [0151.795] GdipGetDC (graphics=0x50186d8, hdc=0xb7e734) returned 0x0 [0151.795] GetCurrentObject (hdc=0x1a010586, type=0x1) returned 0x1b00017 [0151.795] GetCurrentObject (hdc=0x1a010586, type=0x2) returned 0x1900010 [0151.795] GetCurrentObject (hdc=0x1a010586, type=0x7) returned 0xe05058b [0151.795] GetCurrentObject (hdc=0x1a010586, type=0x6) returned 0x18a0048 [0151.795] SaveDC (hdc=0x1a010586) returned 1 [0151.795] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b0406e8 [0151.795] GetClipRgn (hdc=0x1a010586, hrgn=0x5b0406e8) returned 0 [0151.796] SelectClipRgn (hdc=0x1a010586, hrgn=0xb0405a4) returned 2 [0151.796] DeleteObject (ho=0x5b0406e8) returned 1 [0151.796] DeleteObject (ho=0xb0405a4) returned 1 [0151.796] OffsetViewportOrgEx (in: hdc=0x1a010586, x=0, y=0, lppt=0x2985630 | out: lppt=0x2985630) returned 1 [0151.796] OffsetViewportOrgEx (in: hdc=0x1a010586, x=-6, y=-14, lppt=0x2985640 | out: lppt=0x2985640) returned 1 [0151.796] GetClientRect (in: hWnd=0x101a4, lpRect=0xb7e760 | out: lpRect=0xb7e760) returned 1 [0151.796] GetCurrentObject (hdc=0x1a010586, type=0x1) returned 0x1b00017 [0151.796] GetCurrentObject (hdc=0x1a010586, type=0x2) returned 0x1900010 [0151.796] GetCurrentObject (hdc=0x1a010586, type=0x7) returned 0xe05058b [0151.796] GetCurrentObject (hdc=0x1a010586, type=0x6) returned 0x18a0048 [0151.796] SaveDC (hdc=0x1a010586) returned 2 [0151.796] GetNearestColor (hdc=0x1a010586, color=0x0) returned 0x0 [0151.796] CreateSolidBrush (color=0x0) returned 0x4b100572 [0151.796] FillRect (hDC=0x1a010586, lprc=0xb7e600, hbr=0x4b100572) returned 1 [0151.796] DeleteObject (ho=0x4b100572) returned 1 [0151.796] RestoreDC (hdc=0x1a010586, nSavedDC=-1) returned 1 [0151.796] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0xb7e660, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96]qv3ÏÏÈ\x8bntÜé·", lpUsedDefaultChar=0x0) returned 17 [0151.796] GetProcAddress (hModule=0x75810000, lpProcName="ImageList_WriteEx") returned 0x0 [0151.796] SelectPalette (hdc=0x1a010586, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.796] GdipCreateFromHDC (hdc=0x1a010586, graphics=0xb7e584) returned 0x0 [0151.796] GdipSetPageUnit (graphics=0x5028e78, unit=0x2) returned 0x0 [0151.796] GdipCreateMatrix (matrix=0xb7e544) returned 0x0 [0151.797] GdipGetWorldTransform (graphics=0x5028e78, matrix=0x5018d08) returned 0x0 [0151.797] GdipIsMatrixIdentity (matrix=0x5018d08, result=0xb7e55c) returned 0x0 [0151.797] GdipDeleteMatrix (matrix=0x5018d08) returned 0x0 [0151.797] GdipCreateRegion (region=0xb7e544) returned 0x0 [0151.797] GdipGetClip (graphics=0x5028e78, region=0x5018ab8) returned 0x0 [0151.797] GdipIsInfiniteRegion (region=0x5018ab8, graphics=0x5028e78, result=0xb7e550) returned 0x0 [0151.797] GdipDeleteRegion (region=0x5018ab8) returned 0x0 [0151.797] GdipSaveGraphics (graphics=0x5028e78, state=0xb7e57c) returned 0x0 [0151.797] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0xb7e560) returned 0x0 [0151.797] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0xb7e560) returned 0x0 [0151.797] GdipCreateRegion (region=0xb7e500) returned 0x0 [0151.797] GdipGetClip (graphics=0x5028e78, region=0x5028dd8) returned 0x0 [0151.797] GdipCreateMatrix (matrix=0xb7e500) returned 0x0 [0151.797] GdipGetWorldTransform (graphics=0x5028e78, matrix=0x5013678) returned 0x0 [0151.797] GdipIsMatrixIdentity (matrix=0x5013678, result=0xb7e518) returned 0x0 [0151.797] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.797] GdipGetMatrixElements (matrix=0x5013678, matrixOut=0xd670f8) returned 0x0 [0151.797] LocalFree (hMem=0xd670f8) returned 0x0 [0151.797] GdipDeleteMatrix (matrix=0x5013678) returned 0x0 [0151.797] GdipIsInfiniteRegion (region=0x5028dd8, graphics=0x5028e78, result=0xb7e544) returned 0x0 [0151.797] GdipDeleteRegion (region=0x5028dd8) returned 0x0 [0151.797] GdipGetDC (graphics=0x5028e78, hdc=0xb7e54c) returned 0x0 [0151.797] GetCurrentObject (hdc=0x1a010586, type=0x1) returned 0x1b00017 [0151.797] GetCurrentObject (hdc=0x1a010586, type=0x2) returned 0x1900010 [0151.797] GetCurrentObject (hdc=0x1a010586, type=0x7) returned 0xe05058b [0151.797] GetCurrentObject (hdc=0x1a010586, type=0x6) returned 0x18a0048 [0151.797] SaveDC (hdc=0x1a010586) returned 2 [0151.797] OffsetViewportOrgEx (in: hdc=0x1a010586, x=0, y=0, lppt=0x2985a4c | out: lppt=0x2985a4c) returned 1 [0151.797] GetWindowTextLengthW (hWnd=0x101a4) returned 7 [0151.797] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0151.797] GetSystemMetrics (nIndex=42) returned 0 [0151.797] GetWindowTextW (in: hWnd=0x101a4, lpString=0xb7e4cc, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0151.797] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0xd, wParam=0x8, lParam=0xb7e4cc) returned 0x7 [0151.797] GetCurrentObject (hdc=0x1a010586, type=0x6) returned 0x18a0048 [0151.797] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e42c | out: pv=0xb7e42c) returned 92 [0151.797] SelectObject (hdc=0x1a010586, h=0x5a0a06d6) returned 0x18a0048 [0151.797] DrawTextExW (in: hdc=0x1a010586, lpchText="Decrypt", cchText=7, lprc=0xb7e568, format=0x102410, lpdtp=0x2985ad8 | out: lpchText="Decrypt", lprc=0xb7e568) returned 13 [0151.798] GetWindowTextLengthW (hWnd=0x101a4) returned 7 [0151.798] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0151.798] GetSystemMetrics (nIndex=42) returned 0 [0151.798] GetWindowTextW (in: hWnd=0x101a4, lpString=0xb7e4cc, nMaxCount=8 | out: lpString="Decrypt") returned 7 [0151.798] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0xd, wParam=0x8, lParam=0xb7e4cc) returned 0x7 [0151.798] GetTextAlign (hdc=0x1a010586) returned 0x0 [0151.798] GetTextColor (hdc=0x1a010586) returned 0x0 [0151.798] SetTextColor (hdc=0x1a010586, color=0xf0f0f0) returned 0x0 [0151.798] GetCurrentObject (hdc=0x1a010586, type=0x6) returned 0x5a0a06d6 [0151.798] GetObjectW (in: h=0x5a0a06d6, c=92, pv=0xb7e2d8 | out: pv=0xb7e2d8) returned 92 [0151.798] GetBkMode (hdc=0x1a010586) returned 2 [0151.798] SetBkMode (hdc=0x1a010586, mode=1) returned 2 [0151.798] DrawTextExW (in: hdc=0x1a010586, lpchText="Decrypt", cchText=7, lprc=0xb7e50c, format=0x102010, lpdtp=0x2985d1c | out: lpchText="Decrypt", lprc=0xb7e50c) returned 13 [0151.798] RestoreDC (hdc=0x1a010586, nSavedDC=-1) returned 1 [0151.798] GdipReleaseDC (graphics=0x5028e78, hdc=0x1a010586) returned 0x0 [0151.798] GdipDrawLineI (graphics=0x5028e78, pen=0x5018c08, x1=1, y1=6, x2=1, y2=59) returned 0x0 [0151.798] GdipDrawLineI (graphics=0x5028e78, pen=0x5028d48, x1=0, y1=6, x2=0, y2=58) returned 0x0 [0151.799] GdipDrawLineI (graphics=0x5028e78, pen=0x5018c08, x1=0, y1=59, x2=711, y2=59) returned 0x0 [0151.799] GdipDrawLineI (graphics=0x5028e78, pen=0x5028d48, x1=0, y1=58, x2=710, y2=58) returned 0x0 [0151.799] GdipDrawLineI (graphics=0x5028e78, pen=0x5028d48, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0151.799] GdipDrawLineI (graphics=0x5028e78, pen=0x5018c08, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0151.799] GdipDrawLineI (graphics=0x5028e78, pen=0x5028d48, x1=52, y1=5, x2=709, y2=5) returned 0x0 [0151.799] GdipDrawLineI (graphics=0x5028e78, pen=0x5018c08, x1=52, y1=6, x2=710, y2=6) returned 0x0 [0151.799] GdipDrawLineI (graphics=0x5028e78, pen=0x5018c08, x1=710, y1=5, x2=710, y2=59) returned 0x0 [0151.799] GdipDrawLineI (graphics=0x5028e78, pen=0x5028d48, x1=709, y1=6, x2=709, y2=58) returned 0x0 [0151.799] GdipDeletePen (pen=0x5018c08) returned 0x0 [0151.799] GdipDeletePen (pen=0x5028d48) returned 0x0 [0151.799] GdipDeleteGraphics (graphics=0x5028e78) returned 0x0 [0151.799] SelectPalette (hdc=0x1a010586, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.799] RestoreDC (hdc=0x1a010586, nSavedDC=-1) returned 1 [0151.799] GdipReleaseDC (graphics=0x50186d8, hdc=0x1a010586) returned 0x0 [0151.799] GdipRestoreGraphics (graphics=0x50186d8, state=0xfda40dbd) returned 0x0 [0151.799] GdipDeleteRegion (region=0x50189b8) returned 0x0 [0151.799] GetWindowTextLengthW (hWnd=0x101a6) returned 14 [0151.799] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0151.799] GetSystemMetrics (nIndex=42) returned 0 [0151.799] GetWindowTextW (in: hWnd=0x101a6, lpString=0xb7e7e0, nMaxCount=15 | out: lpString="Enter the key:") returned 14 [0151.799] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0xd, wParam=0xf, lParam=0xb7e7e0) returned 0xe [0151.800] GdipGetDC (graphics=0x50186d8, hdc=0xb7e768) returned 0x0 [0151.800] GetCurrentObject (hdc=0x1a010586, type=0x1) returned 0x1b00017 [0151.800] GetCurrentObject (hdc=0x1a010586, type=0x2) returned 0x1900010 [0151.800] GetCurrentObject (hdc=0x1a010586, type=0x7) returned 0xe05058b [0151.800] GetCurrentObject (hdc=0x1a010586, type=0x6) returned 0x18a0048 [0151.800] SaveDC (hdc=0x1a010586) returned 1 [0151.800] GetNearestColor (hdc=0x1a010586, color=0xff) returned 0xff [0151.800] RestoreDC (hdc=0x1a010586, nSavedDC=-1) returned 1 [0151.800] GdipReleaseDC (graphics=0x50186d8, hdc=0x1a010586) returned 0x0 [0151.800] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.800] AdjustWindowRectEx (in: lpRect=0xb7e68c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e68c) returned 1 [0151.800] GdipGetTextRenderingHint (graphics=0x50186d8, mode=0xb7e708) returned 0x0 [0151.800] GdipGetDC (graphics=0x50186d8, hdc=0xb7e6f4) returned 0x0 [0151.800] GetCurrentObject (hdc=0x1a010586, type=0x1) returned 0x1b00017 [0151.800] GetCurrentObject (hdc=0x1a010586, type=0x2) returned 0x1900010 [0151.800] GetCurrentObject (hdc=0x1a010586, type=0x7) returned 0xe05058b [0151.800] GetCurrentObject (hdc=0x1a010586, type=0x6) returned 0x18a0048 [0151.800] SaveDC (hdc=0x1a010586) returned 1 [0151.800] GetTextAlign (hdc=0x1a010586) returned 0x0 [0151.800] GetTextColor (hdc=0x1a010586) returned 0x0 [0151.800] SetTextColor (hdc=0x1a010586, color=0xff) returned 0x0 [0151.800] GetCurrentObject (hdc=0x1a010586, type=0x6) returned 0x18a0048 [0151.801] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e454 | out: pv=0xb7e454) returned 92 [0151.801] SelectObject (hdc=0x1a010586, h=0x5a0a06d6) returned 0x18a0048 [0151.801] GetBkMode (hdc=0x1a010586) returned 2 [0151.801] SetBkMode (hdc=0x1a010586, mode=1) returned 2 [0151.801] DrawTextExW (in: hdc=0x1a010586, lpchText="Enter the key:", cchText=14, lprc=0xb7e688, format=0x100000, lpdtp=0x298621c | out: lpchText="Enter the key:", lprc=0xb7e688) returned 13 [0151.801] RestoreDC (hdc=0x1a010586, nSavedDC=-1) returned 1 [0151.801] GdipReleaseDC (graphics=0x50186d8, hdc=0x1a010586) returned 0x0 [0151.801] GdipGetDC (graphics=0x50186d8, hdc=0xb7e8a4) returned 0x0 [0151.803] BitBlt (hdc=0x180106e6, x=0, y=0, cx=73, cy=13, hdcSrc=0x1a010586, x1=0, y1=0, rop=0xcc0020) returned 1 [0151.803] GdipReleaseDC (graphics=0x50186d8, hdc=0x1a010586) returned 0x0 [0151.803] SelectPalette (hdc=0x180106e6, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.803] SelectObject (hdc=0x1a010586, h=0x185000f) returned 0xe05058b [0151.803] DeleteDC (hdc=0x1a010586) returned 1 [0151.803] GdipDeleteGraphics (graphics=0x50186d8) returned 0x0 [0151.803] EndPaint (hWnd=0x101a6, lpPaint=0xb7e848) returned 1 [0151.803] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.803] IsWindowUnicode (hWnd=0x101a8) returned 1 [0151.803] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.803] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.803] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x1 [0151.803] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0151.803] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.803] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x14, wParam=0x180106e6, lParam=0x0) returned 0x1 [0151.803] SetTextColor (hdc=0x180106e6, color=0x0) returned 0x0 [0151.804] SetBkColor (hdc=0x180106e6, color=0xffffff) returned 0xffffff [0151.804] SetTextColor (hdc=0x180106e6, color=0x0) returned 0x0 [0151.804] SetBkColor (hdc=0x180106e6, color=0xffffff) returned 0xffffff [0151.812] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.812] IsWindowUnicode (hWnd=0x101aa) returned 1 [0151.812] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.812] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.812] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.812] BeginPaint (in: hWnd=0x101aa, lpPaint=0xb7e87c | out: lpPaint=0xb7e87c) returned 0x180106e6 [0151.812] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.812] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.812] GetWindowTextLengthW (hWnd=0x101aa) returned 22 [0151.812] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0151.812] GetSystemMetrics (nIndex=42) returned 0 [0151.812] GetWindowTextW (in: hWnd=0x101aa, lpString=0xb7e800, nMaxCount=23 | out: lpString="How to buy your file ?") returned 22 [0151.812] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0xd, wParam=0x17, lParam=0xb7e800) returned 0x16 [0151.812] GetClientRect (in: hWnd=0x101aa, lpRect=0xb7e8dc | out: lpRect=0xb7e8dc) returned 1 [0151.812] GetCurrentObject (hdc=0x180106e6, type=0x1) returned 0x1b00017 [0151.812] GetCurrentObject (hdc=0x180106e6, type=0x2) returned 0x1900010 [0151.812] GetCurrentObject (hdc=0x180106e6, type=0x7) returned 0x205056d [0151.812] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x18a0048 [0151.812] SaveDC (hdc=0x180106e6) returned 1 [0151.812] GetNearestColor (hdc=0x180106e6, color=0x0) returned 0x0 [0151.813] CreateSolidBrush (color=0x0) returned 0x4c100572 [0151.813] FillRect (hDC=0x180106e6, lprc=0xb7e77c, hbr=0x4c100572) returned 1 [0151.813] DeleteObject (ho=0x4c100572) returned 1 [0151.813] RestoreDC (hdc=0x180106e6, nSavedDC=-1) returned 1 [0151.813] GetWindowTextLengthW (hWnd=0x101aa) returned 22 [0151.813] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0151.813] GetSystemMetrics (nIndex=42) returned 0 [0151.813] GetWindowTextW (in: hWnd=0x101aa, lpString=0xb7e800, nMaxCount=23 | out: lpString="How to buy your file ?") returned 22 [0151.813] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0xd, wParam=0x17, lParam=0xb7e800) returned 0x16 [0151.813] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0xb7e7dc, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96]qv3ÏÏÈ\x8bnt\x0cê·", lpUsedDefaultChar=0x0) returned 17 [0151.813] GetProcAddress (hModule=0x75810000, lpProcName="ImageList_WriteEx") returned 0x0 [0151.813] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=1) returned 0x30080588 [0151.813] GdipCreateFromHDC (hdc=0x180106e6, graphics=0xb7e700) returned 0x0 [0151.813] GdipSetPageUnit (graphics=0x5028dd8, unit=0x2) returned 0x0 [0151.813] GdipCreateMatrix (matrix=0xb7e6c0) returned 0x0 [0151.813] GdipGetWorldTransform (graphics=0x5028dd8, matrix=0x5013418) returned 0x0 [0151.813] GdipIsMatrixIdentity (matrix=0x5013418, result=0xb7e6d8) returned 0x0 [0151.813] GdipDeleteMatrix (matrix=0x5013418) returned 0x0 [0151.813] GdipCreateRegion (region=0xb7e6c0) returned 0x0 [0151.813] GdipGetClip (graphics=0x5028dd8, region=0x5013448) returned 0x0 [0151.813] GdipIsInfiniteRegion (region=0x5013448, graphics=0x5028dd8, result=0xb7e6cc) returned 0x0 [0151.813] GdipDeleteRegion (region=0x5013448) returned 0x0 [0151.813] GdipSaveGraphics (graphics=0x5028dd8, state=0xb7e6f8) returned 0x0 [0151.813] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0xb7e6dc) returned 0x0 [0151.813] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0xb7e6dc) returned 0x0 [0151.814] GdipCreateRegion (region=0xb7e67c) returned 0x0 [0151.814] GdipGetClip (graphics=0x5028dd8, region=0x5018898) returned 0x0 [0151.814] GdipCreateMatrix (matrix=0xb7e67c) returned 0x0 [0151.814] GdipGetWorldTransform (graphics=0x5028dd8, matrix=0x5018928) returned 0x0 [0151.814] GdipIsMatrixIdentity (matrix=0x5018928, result=0xb7e694) returned 0x0 [0151.814] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.814] GdipGetMatrixElements (matrix=0x5018928, matrixOut=0xd670f8) returned 0x0 [0151.814] LocalFree (hMem=0xd670f8) returned 0x0 [0151.814] GdipDeleteMatrix (matrix=0x5018928) returned 0x0 [0151.814] GdipIsInfiniteRegion (region=0x5018898, graphics=0x5028dd8, result=0xb7e6c0) returned 0x0 [0151.814] GdipDeleteRegion (region=0x5018898) returned 0x0 [0151.814] GdipGetDC (graphics=0x5028dd8, hdc=0xb7e6c8) returned 0x0 [0151.814] GetCurrentObject (hdc=0x180106e6, type=0x1) returned 0x1b00017 [0151.814] GetCurrentObject (hdc=0x180106e6, type=0x2) returned 0x1900010 [0151.814] GetCurrentObject (hdc=0x180106e6, type=0x7) returned 0x205056d [0151.814] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x18a0048 [0151.814] SaveDC (hdc=0x180106e6) returned 1 [0151.814] OffsetViewportOrgEx (in: hdc=0x180106e6, x=0, y=0, lppt=0x29868f0 | out: lppt=0x29868f0) returned 1 [0151.814] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x18a0048 [0151.814] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e5a8 | out: pv=0xb7e5a8) returned 92 [0151.814] SelectObject (hdc=0x180106e6, h=0x5a0a06d6) returned 0x18a0048 [0151.814] DrawTextExW (in: hdc=0x180106e6, lpchText="How to buy your file ?", cchText=22, lprc=0xb7e6e4, format=0x102410, lpdtp=0x2986900 | out: lpchText="How to buy your file ?", lprc=0xb7e6e4) returned 13 [0151.814] GetTextAlign (hdc=0x180106e6) returned 0x0 [0151.814] GetTextColor (hdc=0x180106e6) returned 0x0 [0151.814] SetTextColor (hdc=0x180106e6, color=0xf0f0f0) returned 0x0 [0151.814] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x5a0a06d6 [0151.814] GetObjectW (in: h=0x5a0a06d6, c=92, pv=0xb7e454 | out: pv=0xb7e454) returned 92 [0151.814] GetBkMode (hdc=0x180106e6) returned 2 [0151.814] SetBkMode (hdc=0x180106e6, mode=1) returned 2 [0151.814] DrawTextExW (in: hdc=0x180106e6, lpchText="How to buy your file ?", cchText=22, lprc=0xb7e688, format=0x102010, lpdtp=0x2986ac8 | out: lpchText="How to buy your file ?", lprc=0xb7e688) returned 13 [0151.815] RestoreDC (hdc=0x180106e6, nSavedDC=-1) returned 1 [0151.815] GdipReleaseDC (graphics=0x5028dd8, hdc=0x180106e6) returned 0x0 [0151.815] GdipDrawLineI (graphics=0x5028dd8, pen=0x5028d48, x1=1, y1=6, x2=1, y2=93) returned 0x0 [0151.815] GdipDrawLineI (graphics=0x5028dd8, pen=0x50186d8, x1=0, y1=6, x2=0, y2=92) returned 0x0 [0151.815] GdipDrawLineI (graphics=0x5028dd8, pen=0x5028d48, x1=0, y1=93, x2=340, y2=93) returned 0x0 [0151.815] GdipDrawLineI (graphics=0x5028dd8, pen=0x50186d8, x1=0, y1=92, x2=339, y2=92) returned 0x0 [0151.816] GdipDrawLineI (graphics=0x5028dd8, pen=0x50186d8, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0151.816] GdipDrawLineI (graphics=0x5028dd8, pen=0x5028d48, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0151.816] GdipDrawLineI (graphics=0x5028dd8, pen=0x50186d8, x1=117, y1=5, x2=338, y2=5) returned 0x0 [0151.816] GdipDrawLineI (graphics=0x5028dd8, pen=0x5028d48, x1=117, y1=6, x2=339, y2=6) returned 0x0 [0151.816] GdipDrawLineI (graphics=0x5028dd8, pen=0x5028d48, x1=339, y1=5, x2=339, y2=93) returned 0x0 [0151.816] GdipDrawLineI (graphics=0x5028dd8, pen=0x50186d8, x1=338, y1=6, x2=338, y2=92) returned 0x0 [0151.817] GdipDeletePen (pen=0x5028d48) returned 0x0 [0151.817] GdipDeletePen (pen=0x50186d8) returned 0x0 [0151.817] GdipDeleteGraphics (graphics=0x5028dd8) returned 0x0 [0151.817] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=0) returned 0x30080588 [0151.817] SelectPalette (hdc=0x180106e6, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.817] EndPaint (hWnd=0x101aa, lpPaint=0xb7e878) returned 1 [0151.817] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.817] IsWindowUnicode (hWnd=0x101ac) returned 1 [0151.817] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.817] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.818] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.818] BeginPaint (in: hWnd=0x101ac, lpPaint=0xb7e840 | out: lpPaint=0xb7e840) returned 0x180106e6 [0151.818] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.818] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x14, wParam=0x180106e6, lParam=0x0) returned 0x1 [0151.818] GetStockObject (i=5) returned 0x1900015 [0151.818] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.818] CreateCompatibleDC (hdc=0x180106e6) returned 0x24010586 [0151.818] DeleteObject (ho=0xe05058b) returned 1 [0151.818] GetObjectType (h=0x180106e6) returned 0x3 [0151.818] CreateCompatibleBitmap (hdc=0x180106e6, cx=1, cy=1) returned 0x22050587 [0151.818] GetDIBits (in: hdc=0x180106e6, hbm=0x22050587, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0xb7e310, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb7e310) returned 1 [0151.818] GetDIBits (in: hdc=0x180106e6, hbm=0x22050587, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0xb7e310, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb7e310) returned 1 [0151.818] DeleteObject (ho=0x22050587) returned 1 [0151.818] CreateDIBSection (in: hdc=0x180106e6, lpbmi=0xb7e360, usage=0x0, ppvBits=0xb7e854, hSection=0x0, offset=0x0 | out: ppvBits=0xb7e854) returned 0xf05058b [0151.818] SelectObject (hdc=0x24010586, h=0xf05058b) returned 0x185000f [0151.818] GdipCreateFromHDC (hdc=0x24010586, graphics=0xb7e838) returned 0x0 [0151.818] GdipTranslateWorldTransform (graphics=0x5018958, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0151.818] GdipSetClipRectI (graphics=0x5018958, x=0, y=0, width=26, height=21, combineMode=0x0) returned 0x0 [0151.819] GdipCreateMatrix (matrix=0xb7e8a0) returned 0x0 [0151.819] GdipGetWorldTransform (graphics=0x5018958, matrix=0x5018c38) returned 0x0 [0151.819] GdipIsMatrixIdentity (matrix=0x5018c38, result=0xb7e8b8) returned 0x0 [0151.819] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd67248 [0151.819] GdipGetMatrixElements (matrix=0x5018c38, matrixOut=0xd67248) returned 0x0 [0151.819] LocalFree (hMem=0xd67248) returned 0x0 [0151.819] GdipDeleteMatrix (matrix=0x5018c38) returned 0x0 [0151.819] GdipCreateRegion (region=0xb7e8a0) returned 0x0 [0151.819] GdipGetClip (graphics=0x5018958, region=0x5018c68) returned 0x0 [0151.819] GdipIsInfiniteRegion (region=0x5018c68, graphics=0x5018958, result=0xb7e8ac) returned 0x0 [0151.819] GdipSaveGraphics (graphics=0x5018958, state=0xb7e8d8) returned 0x0 [0151.819] GdipRestoreGraphics (graphics=0x5018958, state=0xfd9e0dbd) returned 0x0 [0151.819] GdipDeleteRegion (region=0x5018c68) returned 0x0 [0151.819] SystemParametersInfoW (in: uiAction=0x42, uiParam=0xc, pvParam=0xb7e67c, fWinIni=0x0 | out: pvParam=0xb7e67c) returned 1 [0151.819] GdipGetDC (graphics=0x5018958, hdc=0xb7e628) returned 0x0 [0151.819] GetCurrentObject (hdc=0x24010586, type=0x1) returned 0x1b00017 [0151.819] GetCurrentObject (hdc=0x24010586, type=0x2) returned 0x1900010 [0151.820] GetCurrentObject (hdc=0x24010586, type=0x7) returned 0xf05058b [0151.820] GetCurrentObject (hdc=0x24010586, type=0x6) returned 0x18a0048 [0151.820] SaveDC (hdc=0x24010586) returned 1 [0151.820] GetNearestColor (hdc=0x24010586, color=0xc0) returned 0xc0 [0151.820] GetNearestColor (hdc=0x24010586, color=0x40) returned 0x40 [0151.820] GetNearestColor (hdc=0x24010586, color=0x0) returned 0x0 [0151.820] GetNearestColor (hdc=0x24010586, color=0x5656e5) returned 0x5656e5 [0151.820] GetNearestColor (hdc=0x24010586, color=0xf0f0f0) returned 0xf0f0f0 [0151.820] GetNearestColor (hdc=0x24010586, color=0x6060ff) returned 0x6060ff [0151.820] GetNearestColor (hdc=0x24010586, color=0x5656e5) returned 0x5656e5 [0151.820] GetNearestColor (hdc=0x24010586, color=0xe6) returned 0xe6 [0151.820] GetNearestColor (hdc=0x24010586, color=0xf0f0f0) returned 0xf0f0f0 [0151.820] RestoreDC (hdc=0x24010586, nSavedDC=-1) returned 1 [0151.820] GdipReleaseDC (graphics=0x5018958, hdc=0x24010586) returned 0x0 [0151.820] DrawTextExW (in: hdc=0xd010694, lpchText="?", cchText=1, lprc=0xb7e4cc, format=0x102415, lpdtp=0x29880d0 | out: lpchText="?", lprc=0xb7e4cc) returned 13 [0151.821] GdipCreateRegion (region=0xb7e520) returned 0x0 [0151.821] GdipGetClip (graphics=0x5018958, region=0x5018c68) returned 0x0 [0151.821] GdipCreateMatrix (matrix=0xb7e520) returned 0x0 [0151.821] GdipGetWorldTransform (graphics=0x5018958, matrix=0x5018cf8) returned 0x0 [0151.821] GdipIsMatrixIdentity (matrix=0x5018cf8, result=0xb7e538) returned 0x0 [0151.821] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.821] GdipGetMatrixElements (matrix=0x5018cf8, matrixOut=0xd670f8) returned 0x0 [0151.821] LocalFree (hMem=0xd670f8) returned 0x0 [0151.821] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.821] GdipGetMatrixElements (matrix=0x5018cf8, matrixOut=0xd670f8) returned 0x0 [0151.821] LocalFree (hMem=0xd670f8) returned 0x0 [0151.821] GdipDeleteMatrix (matrix=0x5018cf8) returned 0x0 [0151.821] GdipIsInfiniteRegion (region=0x5018c68, graphics=0x5018958, result=0xb7e564) returned 0x0 [0151.821] GdipIsInfiniteRegion (region=0x5018c68, graphics=0x5018958, result=0xb7e554) returned 0x0 [0151.821] GdipGetRegionHRgn (region=0x5018c68, graphics=0x5018958, hRgn=0xb7e554) returned 0x0 [0151.821] GdipDeleteRegion (region=0x5018c68) returned 0x0 [0151.821] GdipGetDC (graphics=0x5018958, hdc=0xb7e56c) returned 0x0 [0151.821] GetCurrentObject (hdc=0x24010586, type=0x1) returned 0x1b00017 [0151.821] GetCurrentObject (hdc=0x24010586, type=0x2) returned 0x1900010 [0151.821] GetCurrentObject (hdc=0x24010586, type=0x7) returned 0xf05058b [0151.821] GetCurrentObject (hdc=0x24010586, type=0x6) returned 0x18a0048 [0151.821] SaveDC (hdc=0x24010586) returned 1 [0151.821] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc0405a4 [0151.821] GetClipRgn (hdc=0x24010586, hrgn=0xc0405a4) returned 0 [0151.821] SelectClipRgn (hdc=0x24010586, hrgn=0x620406e8) returned 2 [0151.821] DeleteObject (ho=0xc0405a4) returned 1 [0151.821] DeleteObject (ho=0x620406e8) returned 1 [0151.821] OffsetViewportOrgEx (in: hdc=0x24010586, x=0, y=0, lppt=0x29882c8 | out: lppt=0x29882c8) returned 1 [0151.821] GetNearestColor (hdc=0x24010586, color=0xc0) returned 0xc0 [0151.821] CreateSolidBrush (color=0xc0) returned 0x4d100572 [0151.822] FillRect (hDC=0x24010586, lprc=0xb7e570, hbr=0x4d100572) returned 1 [0151.822] DeleteObject (ho=0x4d100572) returned 1 [0151.822] RestoreDC (hdc=0x24010586, nSavedDC=-1) returned 1 [0151.822] GdipReleaseDC (graphics=0x5018958, hdc=0x24010586) returned 0x0 [0151.822] GdipGetTextRenderingHint (graphics=0x5018958, mode=0xb7e5ec) returned 0x0 [0151.822] GdipGetDC (graphics=0x5018958, hdc=0xb7e5d8) returned 0x0 [0151.822] GetCurrentObject (hdc=0x24010586, type=0x1) returned 0x1b00017 [0151.822] GetCurrentObject (hdc=0x24010586, type=0x2) returned 0x1900010 [0151.822] GetCurrentObject (hdc=0x24010586, type=0x7) returned 0xf05058b [0151.822] GetCurrentObject (hdc=0x24010586, type=0x6) returned 0x18a0048 [0151.822] SaveDC (hdc=0x24010586) returned 1 [0151.822] GetTextAlign (hdc=0x24010586) returned 0x0 [0151.822] GetTextColor (hdc=0x24010586) returned 0x0 [0151.822] SetTextColor (hdc=0x24010586, color=0xf0f0f0) returned 0x0 [0151.822] GetCurrentObject (hdc=0x24010586, type=0x6) returned 0x18a0048 [0151.822] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e338 | out: pv=0xb7e338) returned 92 [0151.822] SelectObject (hdc=0x24010586, h=0x5a0a06d6) returned 0x18a0048 [0151.822] GetBkMode (hdc=0x24010586) returned 2 [0151.822] SetBkMode (hdc=0x24010586, mode=1) returned 2 [0151.822] DrawTextExW (in: hdc=0x24010586, lpchText="?", cchText=1, lprc=0xb7e41c, format=0x102415, lpdtp=0x2988588 | out: lpchText="?", lprc=0xb7e41c) returned 13 [0151.822] DrawTextExW (in: hdc=0x24010586, lpchText="?", cchText=1, lprc=0xb7e56c, format=0x102015, lpdtp=0x2988588 | out: lpchText="?", lprc=0xb7e56c) returned 13 [0151.822] RestoreDC (hdc=0x24010586, nSavedDC=-1) returned 1 [0151.822] GdipReleaseDC (graphics=0x5018958, hdc=0x24010586) returned 0x0 [0151.822] GetFocus () returned 0x101c4 [0151.822] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0xb7e650) returned 0x0 [0151.823] GdipDrawRectangleI (graphics=0x5018958, pen=0x50186d8, x=0, y=0, width=25, height=20) returned 0x0 [0151.823] GdipDeletePen (pen=0x50186d8) returned 0x0 [0151.823] GdipGetDC (graphics=0x5018958, hdc=0xb7e898) returned 0x0 [0151.823] BitBlt (hdc=0x180106e6, x=0, y=0, cx=26, cy=21, hdcSrc=0x24010586, x1=0, y1=0, rop=0xcc0020) returned 1 [0151.823] GdipReleaseDC (graphics=0x5018958, hdc=0x24010586) returned 0x0 [0151.823] SelectPalette (hdc=0x180106e6, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.823] SelectObject (hdc=0x24010586, h=0x185000f) returned 0xf05058b [0151.823] DeleteDC (hdc=0x24010586) returned 1 [0151.823] GdipDeleteGraphics (graphics=0x5018958) returned 0x0 [0151.823] EndPaint (hWnd=0x101ac, lpPaint=0xb7e83c) returned 1 [0151.823] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.823] IsWindowUnicode (hWnd=0x101ae) returned 1 [0151.823] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.823] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.823] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.823] BeginPaint (in: hWnd=0x101ae, lpPaint=0xb7e844 | out: lpPaint=0xb7e844) returned 0x180106e6 [0151.823] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.823] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.823] CreateCompatibleDC (hdc=0x180106e6) returned 0x27010586 [0151.823] DeleteObject (ho=0xf05058b) returned 1 [0151.823] GetObjectType (h=0x180106e6) returned 0x3 [0151.823] CreateCompatibleBitmap (hdc=0x180106e6, cx=1, cy=1) returned 0x24050587 [0151.824] GetDIBits (in: hdc=0x180106e6, hbm=0x24050587, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0xb7e314, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb7e314) returned 1 [0151.824] GetDIBits (in: hdc=0x180106e6, hbm=0x24050587, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0xb7e314, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb7e314) returned 1 [0151.824] DeleteObject (ho=0x24050587) returned 1 [0151.824] CreateDIBSection (in: hdc=0x180106e6, lpbmi=0xb7e364, usage=0x0, ppvBits=0xb7e858, hSection=0x0, offset=0x0 | out: ppvBits=0xb7e858) returned 0x1005058b [0151.824] SelectObject (hdc=0x27010586, h=0x1005058b) returned 0x185000f [0151.824] GdipCreateFromHDC (hdc=0x27010586, graphics=0xb7e83c) returned 0x0 [0151.824] GdipTranslateWorldTransform (graphics=0x5018898, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0151.824] GdipSetClipRectI (graphics=0x5018898, x=0, y=0, width=243, height=13, combineMode=0x0) returned 0x0 [0151.824] GdipCreateMatrix (matrix=0xb7e8a4) returned 0x0 [0151.824] GdipGetWorldTransform (graphics=0x5018898, matrix=0x5018b78) returned 0x0 [0151.824] GdipIsMatrixIdentity (matrix=0x5018b78, result=0xb7e8bc) returned 0x0 [0151.824] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.824] GdipGetMatrixElements (matrix=0x5018b78, matrixOut=0xd670f8) returned 0x0 [0151.824] LocalFree (hMem=0xd670f8) returned 0x0 [0151.824] GdipDeleteMatrix (matrix=0x5018b78) returned 0x0 [0151.824] GdipCreateRegion (region=0xb7e8a4) returned 0x0 [0151.824] GdipGetClip (graphics=0x5018898, region=0x5018ba8) returned 0x0 [0151.824] GdipIsInfiniteRegion (region=0x5018ba8, graphics=0x5018898, result=0xb7e8b0) returned 0x0 [0151.824] GdipSaveGraphics (graphics=0x5018898, state=0xb7e8dc) returned 0x0 [0151.824] GetWindowTextLengthW (hWnd=0x101ae) returned 43 [0151.824] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2b [0151.824] GetSystemMetrics (nIndex=42) returned 0 [0151.824] GetWindowTextW (in: hWnd=0x101ae, lpString=0xb7e7a0, nMaxCount=44 | out: lpString="https://www.youtube.com/watch?v=Ji9IwPId5Uk") returned 43 [0151.824] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0xd, wParam=0x2c, lParam=0xb7e7a0) returned 0x2b [0151.824] GdipRestoreGraphics (graphics=0x5018898, state=0xfd9c0dbd) returned 0x0 [0151.824] GdipDeleteRegion (region=0x5018ba8) returned 0x0 [0151.824] GetWindowTextLengthW (hWnd=0x101ae) returned 43 [0151.824] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2b [0151.824] GetSystemMetrics (nIndex=42) returned 0 [0151.824] GetWindowTextW (in: hWnd=0x101ae, lpString=0xb7e7a0, nMaxCount=44 | out: lpString="https://www.youtube.com/watch?v=Ji9IwPId5Uk") returned 43 [0151.824] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0xd, wParam=0x2c, lParam=0xb7e7a0) returned 0x2b [0151.825] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2989a6c) returned 0x0 [0151.825] GdipSetStringFormatAlign (format=0x5018ba8, align=0x0) returned 0x0 [0151.825] GdipSetStringFormatLineAlign (format=0x5018ba8, align=0x0) returned 0x0 [0151.825] GdipSetStringFormatHotkeyPrefix (format=0x5018ba8, hotkeyPrefix=2) returned 0x0 [0151.826] GdipGetStringFormatFlags (format=0x5018ba8, flags=0xb7e62c) returned 0x0 [0151.826] GdipSetStringFormatFlags (format=0x5018ba8, flags=2048) returned 0x0 [0151.827] CoTaskMemAlloc (cb=0x10) returned 0xdaaa78 [0151.827] GdipSetStringFormatMeasurableCharacterRanges (format=0x5018ba8, rangeCount=2, ranges=0xdaaa78) returned 0x0 [0151.828] CoTaskMemFree (pv=0xdaaa78) [0151.828] GdipCreateFont (fontFamily=0x5004738, emSize=0x41040000, style=4, unit=0x3, font=0x2989f08) returned 0x0 [0151.828] GdipGetFontSize (font=0x5018c00, size=0x2989f0c) returned 0x0 [0151.828] GdipGetFamilyName (in: family=0x5004738, name=0xb7e4fc, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0151.828] GetDeviceCaps (hdc=0xd010694, index=90) returned 96 [0151.828] CoTaskMemAlloc (cb=0x5c) returned 0xd7dd88 [0151.828] CreateFontIndirectW (lplf=0xd7dd88) returned 0xd0a06eb [0151.828] CoTaskMemFree (pv=0xd7dd88) [0151.828] GetObjectW (in: h=0xd0a06eb, c=92, pv=0xb7e4c4 | out: pv=0xb7e4c4) returned 92 [0151.828] SelectObject (hdc=0xd010694, h=0xd0a06eb) returned 0x150a06d9 [0151.828] DeleteObject (ho=0x150a06d9) returned 1 [0151.828] GetMapMode (hdc=0xd010694) returned 1 [0151.828] GetTextMetricsW (in: hdc=0xd010694, lptm=0xb7e4e8 | out: lptm=0xb7e4e8) returned 1 [0151.828] DrawTextExW (in: hdc=0xd010694, lpchText="https://www.youtube.com/watch?v=Ji9IwPId5Uk", cchText=43, lprc=0xb7e5f4, format=0x100400, lpdtp=0x298a4c0 | out: lpchText="https://www.youtube.com/watch?v=Ji9IwPId5Uk", lprc=0xb7e5f4) returned 13 [0151.828] GdipCreateRegion (region=0xb7e5d4) returned 0x0 [0151.828] GdipGetClip (graphics=0x5018898, region=0x5018c28) returned 0x0 [0151.829] GdipCreateMatrix (matrix=0xb7e5d4) returned 0x0 [0151.829] GdipGetWorldTransform (graphics=0x5018898, matrix=0x5018cb8) returned 0x0 [0151.829] GdipIsMatrixIdentity (matrix=0x5018cb8, result=0xb7e5ec) returned 0x0 [0151.829] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.829] GdipGetMatrixElements (matrix=0x5018cb8, matrixOut=0xd670f8) returned 0x0 [0151.829] LocalFree (hMem=0xd670f8) returned 0x0 [0151.829] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.829] GdipGetMatrixElements (matrix=0x5018cb8, matrixOut=0xd670f8) returned 0x0 [0151.829] LocalFree (hMem=0xd670f8) returned 0x0 [0151.829] GdipDeleteMatrix (matrix=0x5018cb8) returned 0x0 [0151.829] GdipIsInfiniteRegion (region=0x5018c28, graphics=0x5018898, result=0xb7e618) returned 0x0 [0151.829] GdipIsInfiniteRegion (region=0x5018c28, graphics=0x5018898, result=0xb7e608) returned 0x0 [0151.829] GdipGetRegionHRgn (region=0x5018c28, graphics=0x5018898, hRgn=0xb7e608) returned 0x0 [0151.829] GdipDeleteRegion (region=0x5018c28) returned 0x0 [0151.829] GdipGetDC (graphics=0x5018898, hdc=0xb7e620) returned 0x0 [0151.829] GetCurrentObject (hdc=0x27010586, type=0x1) returned 0x1b00017 [0151.829] GetCurrentObject (hdc=0x27010586, type=0x2) returned 0x1900010 [0151.829] GetCurrentObject (hdc=0x27010586, type=0x7) returned 0x1005058b [0151.829] GetCurrentObject (hdc=0x27010586, type=0x6) returned 0x18a0048 [0151.829] SaveDC (hdc=0x27010586) returned 1 [0151.829] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x630406e8 [0151.829] GetClipRgn (hdc=0x27010586, hrgn=0x630406e8) returned 0 [0151.829] SelectClipRgn (hdc=0x27010586, hrgn=0x100405a4) returned 2 [0151.829] DeleteObject (ho=0x630406e8) returned 1 [0151.829] DeleteObject (ho=0x100405a4) returned 1 [0151.829] OffsetViewportOrgEx (in: hdc=0x27010586, x=0, y=0, lppt=0x298a6b8 | out: lppt=0x298a6b8) returned 1 [0151.829] RestoreDC (hdc=0x27010586, nSavedDC=-1) returned 1 [0151.829] GdipReleaseDC (graphics=0x5018898, hdc=0x27010586) returned 0x0 [0151.830] GdipCreateRegionRectI (rect=0xb7e638, region=0xb7e648) returned 0x0 [0151.830] GdipDeleteFont (font=0x5018c00) returned 0x0 [0151.830] GdipDeleteStringFormat (format=0x5018ba8) returned 0x0 [0151.830] GdipCreateSolidFill (color=0xfff0f0f0, brush=0xb7e6f0) returned 0x0 [0151.831] GdipCreateSolidFill (color=0xff4169e1, brush=0xb7e6f0) returned 0x0 [0151.831] GetClientRect (in: hWnd=0x101ae, lpRect=0xb7e65c | out: lpRect=0xb7e65c) returned 1 [0151.832] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0xb7e488, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96]qv3ÏÏÈ\x8bntÔé·", lpUsedDefaultChar=0x0) returned 17 [0151.832] GetProcAddress (hModule=0x75810000, lpProcName="ImageList_WriteEx") returned 0x0 [0151.832] GdipCreateRegion (region=0xb7e498) returned 0x0 [0151.832] GdipGetClip (graphics=0x5018898, region=0x5018b78) returned 0x0 [0151.832] GdipCreateMatrix (matrix=0xb7e498) returned 0x0 [0151.832] GdipGetWorldTransform (graphics=0x5018898, matrix=0x5018ce8) returned 0x0 [0151.832] GdipIsMatrixIdentity (matrix=0x5018ce8, result=0xb7e4b0) returned 0x0 [0151.832] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.832] GdipGetMatrixElements (matrix=0x5018ce8, matrixOut=0xd670f8) returned 0x0 [0151.832] LocalFree (hMem=0xd670f8) returned 0x0 [0151.832] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.832] GdipGetMatrixElements (matrix=0x5018ce8, matrixOut=0xd670f8) returned 0x0 [0151.832] LocalFree (hMem=0xd670f8) returned 0x0 [0151.832] GdipDeleteMatrix (matrix=0x5018ce8) returned 0x0 [0151.832] GdipIsInfiniteRegion (region=0x5018b78, graphics=0x5018898, result=0xb7e4dc) returned 0x0 [0151.832] GdipIsInfiniteRegion (region=0x5018b78, graphics=0x5018898, result=0xb7e4cc) returned 0x0 [0151.832] GdipGetRegionHRgn (region=0x5018b78, graphics=0x5018898, hRgn=0xb7e4cc) returned 0x0 [0151.832] GdipDeleteRegion (region=0x5018b78) returned 0x0 [0151.832] GdipGetDC (graphics=0x5018898, hdc=0xb7e4e4) returned 0x0 [0151.832] GetCurrentObject (hdc=0x27010586, type=0x1) returned 0x1b00017 [0151.832] GetCurrentObject (hdc=0x27010586, type=0x2) returned 0x1900010 [0151.832] GetCurrentObject (hdc=0x27010586, type=0x7) returned 0x1005058b [0151.832] GetCurrentObject (hdc=0x27010586, type=0x6) returned 0x18a0048 [0151.832] SaveDC (hdc=0x27010586) returned 1 [0151.832] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x110405a4 [0151.832] GetClipRgn (hdc=0x27010586, hrgn=0x110405a4) returned 0 [0151.832] SelectClipRgn (hdc=0x27010586, hrgn=0x640406e8) returned 2 [0151.832] DeleteObject (ho=0x110405a4) returned 1 [0151.832] DeleteObject (ho=0x640406e8) returned 1 [0151.832] OffsetViewportOrgEx (in: hdc=0x27010586, x=0, y=0, lppt=0x298acf8 | out: lppt=0x298acf8) returned 1 [0151.833] OffsetViewportOrgEx (in: hdc=0x27010586, x=-11, y=-44, lppt=0x298ad08 | out: lppt=0x298ad08) returned 1 [0151.834] GetClientRect (in: hWnd=0x101aa, lpRect=0xb7e510 | out: lpRect=0xb7e510) returned 1 [0151.834] GetCurrentObject (hdc=0x27010586, type=0x1) returned 0x1b00017 [0151.834] GetCurrentObject (hdc=0x27010586, type=0x2) returned 0x1900010 [0151.834] GetCurrentObject (hdc=0x27010586, type=0x7) returned 0x1005058b [0151.834] GetCurrentObject (hdc=0x27010586, type=0x6) returned 0x18a0048 [0151.834] SaveDC (hdc=0x27010586) returned 2 [0151.834] GetNearestColor (hdc=0x27010586, color=0x0) returned 0x0 [0151.834] CreateSolidBrush (color=0x0) returned 0x4e100572 [0151.834] FillRect (hDC=0x27010586, lprc=0xb7e3b0, hbr=0x4e100572) returned 1 [0151.834] DeleteObject (ho=0x4e100572) returned 1 [0151.834] RestoreDC (hdc=0x27010586, nSavedDC=-1) returned 1 [0151.834] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0xb7e410, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96]qv3ÏÏÈ\x8bntÔé·", lpUsedDefaultChar=0x0) returned 17 [0151.835] GetProcAddress (hModule=0x75810000, lpProcName="ImageList_WriteEx") returned 0x0 [0151.835] SelectPalette (hdc=0x27010586, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.835] GdipCreateFromHDC (hdc=0x27010586, graphics=0xb7e334) returned 0x0 [0151.835] GdipSetPageUnit (graphics=0x50299e8, unit=0x2) returned 0x0 [0151.835] GdipCreateMatrix (matrix=0xb7e2f4) returned 0x0 [0151.835] GdipGetWorldTransform (graphics=0x50299e8, matrix=0x5018cb8) returned 0x0 [0151.835] GdipIsMatrixIdentity (matrix=0x5018cb8, result=0xb7e30c) returned 0x0 [0151.835] GdipDeleteMatrix (matrix=0x5018cb8) returned 0x0 [0151.835] GdipCreateRegion (region=0xb7e2f4) returned 0x0 [0151.835] GdipGetClip (graphics=0x50299e8, region=0x50135b8) returned 0x0 [0151.835] GdipIsInfiniteRegion (region=0x50135b8, graphics=0x50299e8, result=0xb7e300) returned 0x0 [0151.835] GdipDeleteRegion (region=0x50135b8) returned 0x0 [0151.835] GdipSaveGraphics (graphics=0x50299e8, state=0xb7e32c) returned 0x0 [0151.835] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0xb7e310) returned 0x0 [0151.835] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0xb7e310) returned 0x0 [0151.835] GdipCreateRegion (region=0xb7e2b0) returned 0x0 [0151.835] GdipGetClip (graphics=0x50299e8, region=0x502a058) returned 0x0 [0151.835] GdipCreateMatrix (matrix=0xb7e2b0) returned 0x0 [0151.835] GdipGetWorldTransform (graphics=0x50299e8, matrix=0x5018be8) returned 0x0 [0151.835] GdipIsMatrixIdentity (matrix=0x5018be8, result=0xb7e2c8) returned 0x0 [0151.835] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.835] GdipGetMatrixElements (matrix=0x5018be8, matrixOut=0xd670f8) returned 0x0 [0151.835] LocalFree (hMem=0xd670f8) returned 0x0 [0151.835] GdipDeleteMatrix (matrix=0x5018be8) returned 0x0 [0151.835] GdipIsInfiniteRegion (region=0x502a058, graphics=0x50299e8, result=0xb7e2f4) returned 0x0 [0151.835] GdipDeleteRegion (region=0x502a058) returned 0x0 [0151.835] GdipGetDC (graphics=0x50299e8, hdc=0xb7e2fc) returned 0x0 [0151.835] GetCurrentObject (hdc=0x27010586, type=0x1) returned 0x1b00017 [0151.835] GetCurrentObject (hdc=0x27010586, type=0x2) returned 0x1900010 [0151.835] GetCurrentObject (hdc=0x27010586, type=0x7) returned 0x1005058b [0151.835] GetCurrentObject (hdc=0x27010586, type=0x6) returned 0x18a0048 [0151.835] SaveDC (hdc=0x27010586) returned 2 [0151.835] OffsetViewportOrgEx (in: hdc=0x27010586, x=0, y=0, lppt=0x298b114 | out: lppt=0x298b114) returned 1 [0151.835] GetWindowTextLengthW (hWnd=0x101aa) returned 22 [0151.836] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0151.836] GetSystemMetrics (nIndex=42) returned 0 [0151.836] GetWindowTextW (in: hWnd=0x101aa, lpString=0xb7e25c, nMaxCount=23 | out: lpString="How to buy your file ?") returned 22 [0151.836] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0xd, wParam=0x17, lParam=0xb7e25c) returned 0x16 [0151.836] GetCurrentObject (hdc=0x27010586, type=0x6) returned 0x18a0048 [0151.836] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e1dc | out: pv=0xb7e1dc) returned 92 [0151.836] SelectObject (hdc=0x27010586, h=0x5a0a06d6) returned 0x18a0048 [0151.836] DrawTextExW (in: hdc=0x27010586, lpchText="How to buy your file ?", cchText=22, lprc=0xb7e318, format=0x102410, lpdtp=0x298b200 | out: lpchText="How to buy your file ?", lprc=0xb7e318) returned 13 [0151.836] GetWindowTextLengthW (hWnd=0x101aa) returned 22 [0151.836] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x16 [0151.836] GetSystemMetrics (nIndex=42) returned 0 [0151.836] GetWindowTextW (in: hWnd=0x101aa, lpString=0xb7e25c, nMaxCount=23 | out: lpString="How to buy your file ?") returned 22 [0151.836] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0xd, wParam=0x17, lParam=0xb7e25c) returned 0x16 [0151.836] GetTextAlign (hdc=0x27010586) returned 0x0 [0151.836] GetTextColor (hdc=0x27010586) returned 0x0 [0151.836] SetTextColor (hdc=0x27010586, color=0xf0f0f0) returned 0x0 [0151.836] GetCurrentObject (hdc=0x27010586, type=0x6) returned 0x5a0a06d6 [0151.836] GetObjectW (in: h=0x5a0a06d6, c=92, pv=0xb7e088 | out: pv=0xb7e088) returned 92 [0151.836] GetBkMode (hdc=0x27010586) returned 2 [0151.836] SetBkMode (hdc=0x27010586, mode=1) returned 2 [0151.836] DrawTextExW (in: hdc=0x27010586, lpchText="How to buy your file ?", cchText=22, lprc=0xb7e2bc, format=0x102010, lpdtp=0x298b4a4 | out: lpchText="How to buy your file ?", lprc=0xb7e2bc) returned 13 [0151.837] RestoreDC (hdc=0x27010586, nSavedDC=-1) returned 1 [0151.837] GdipReleaseDC (graphics=0x50299e8, hdc=0x27010586) returned 0x0 [0151.837] GdipDrawLineI (graphics=0x50299e8, pen=0x50186d8, x1=1, y1=6, x2=1, y2=93) returned 0x0 [0151.837] GdipDrawLineI (graphics=0x50299e8, pen=0x50135b8, x1=0, y1=6, x2=0, y2=92) returned 0x0 [0151.837] GdipDrawLineI (graphics=0x50299e8, pen=0x50186d8, x1=0, y1=93, x2=340, y2=93) returned 0x0 [0151.837] GdipDrawLineI (graphics=0x50299e8, pen=0x50135b8, x1=0, y1=92, x2=339, y2=92) returned 0x0 [0151.837] GdipDrawLineI (graphics=0x50299e8, pen=0x50135b8, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0151.837] GdipDrawLineI (graphics=0x50299e8, pen=0x50186d8, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0151.837] GdipDrawLineI (graphics=0x50299e8, pen=0x50135b8, x1=117, y1=5, x2=338, y2=5) returned 0x0 [0151.837] GdipDrawLineI (graphics=0x50299e8, pen=0x50186d8, x1=117, y1=6, x2=339, y2=6) returned 0x0 [0151.837] GdipDrawLineI (graphics=0x50299e8, pen=0x50186d8, x1=339, y1=5, x2=339, y2=93) returned 0x0 [0151.837] GdipDrawLineI (graphics=0x50299e8, pen=0x50135b8, x1=338, y1=6, x2=338, y2=92) returned 0x0 [0151.837] GdipDeletePen (pen=0x50186d8) returned 0x0 [0151.837] GdipDeletePen (pen=0x50135b8) returned 0x0 [0151.837] GdipDeleteGraphics (graphics=0x50299e8) returned 0x0 [0151.837] SelectPalette (hdc=0x27010586, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.837] RestoreDC (hdc=0x27010586, nSavedDC=-1) returned 1 [0151.837] GdipReleaseDC (graphics=0x5018898, hdc=0x27010586) returned 0x0 [0151.838] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main", ulOptions=0x0, samDesired=0x20019, phkResult=0xb7e664 | out: phkResult=0xb7e664*=0x2b0) returned 0x0 [0151.838] RegQueryValueExW (in: hKey=0x2b0, lpValueName="Anchor Underline", lpReserved=0x0, lpType=0xb7e684, lpData=0x0, lpcbData=0xb7e680*=0x0 | out: lpType=0xb7e684*=0x1, lpData=0x0, lpcbData=0xb7e680*=0x8) returned 0x0 [0151.838] RegQueryValueExW (in: hKey=0x2b0, lpValueName="Anchor Underline", lpReserved=0x0, lpType=0xb7e684, lpData=0x298b80c, lpcbData=0xb7e680*=0x8 | out: lpType=0xb7e684*=0x1, lpData="yes", lpcbData=0xb7e680*=0x8) returned 0x0 [0151.838] RegCloseKey (hKey=0x2b0) returned 0x0 [0151.838] GdipCreateFont (fontFamily=0x5004738, emSize=0x41040000, style=4, unit=0x3, font=0x298b840) returned 0x0 [0151.838] GdipGetFontSize (font=0x5013648, size=0x298b844) returned 0x0 [0151.839] GdipCreateRegion (region=0xb7e6f4) returned 0x0 [0151.839] GdipGetClip (graphics=0x5018898, region=0x50186d8) returned 0x0 [0151.839] GdipSetClipRegion (graphics=0x5018898, region=0x50186d8, combineMode=0x0) returned 0x0 [0151.839] GdipCreateMatrix (matrix=0xb7e6f4) returned 0x0 [0151.839] GdipGetWorldTransform (graphics=0x5018898, matrix=0x5013670) returned 0x0 [0151.839] GdipGetRegionScansCount (region=0x5018c28, count=0xb7e6ec, matrix=0x5013670) returned 0x0 [0151.839] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0xdaa700 [0151.840] GdipGetRegionScans (region=0x5018c28, rects=0xdaa700, count=0xb7e6ec, matrix=0x5013670) returned 0x0 [0151.840] LocalFree (hMem=0xdaa700) returned 0x0 [0151.841] GdipCreateRegionRect (rect=0xb7e6e4, region=0xb7e6f4) returned 0x0 [0151.841] GdipSetClipRegion (graphics=0x5018898, region=0x50299e8, combineMode=0x4) returned 0x0 [0151.841] GdipDeleteRegion (region=0x50299e8) returned 0x0 [0151.841] GdipCreateRegionRect (rect=0xb7e568, region=0xb7e578) returned 0x0 [0151.841] GdipSetClipRegion (graphics=0x5018898, region=0x50299e8, combineMode=0x0) returned 0x0 [0151.841] GdipGetDC (graphics=0x5018898, hdc=0xb7e58c) returned 0x0 [0151.842] GetCurrentObject (hdc=0x27010586, type=0x1) returned 0x1b00017 [0151.842] GetCurrentObject (hdc=0x27010586, type=0x2) returned 0x1900010 [0151.842] GetCurrentObject (hdc=0x27010586, type=0x7) returned 0x1005058b [0151.842] GetCurrentObject (hdc=0x27010586, type=0x6) returned 0x18a0048 [0151.842] SaveDC (hdc=0x27010586) returned 1 [0151.842] GetNearestColor (hdc=0x27010586, color=0xe16941) returned 0xe16941 [0151.842] RestoreDC (hdc=0x27010586, nSavedDC=-1) returned 1 [0151.842] GdipReleaseDC (graphics=0x5018898, hdc=0x27010586) returned 0x0 [0151.842] GdipGetTextRenderingHint (graphics=0x5018898, mode=0xb7e52c) returned 0x0 [0151.842] GdipGetDC (graphics=0x5018898, hdc=0xb7e518) returned 0x0 [0151.842] GetCurrentObject (hdc=0x27010586, type=0x1) returned 0x1b00017 [0151.842] GetCurrentObject (hdc=0x27010586, type=0x2) returned 0x1900010 [0151.842] GetCurrentObject (hdc=0x27010586, type=0x7) returned 0x1005058b [0151.842] GetCurrentObject (hdc=0x27010586, type=0x6) returned 0x18a0048 [0151.842] SaveDC (hdc=0x27010586) returned 1 [0151.842] GetTextAlign (hdc=0x27010586) returned 0x0 [0151.842] GetTextColor (hdc=0x27010586) returned 0x0 [0151.842] SetTextColor (hdc=0x27010586, color=0xe16941) returned 0x0 [0151.842] GetCurrentObject (hdc=0x27010586, type=0x6) returned 0x18a0048 [0151.842] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e278 | out: pv=0xb7e278) returned 92 [0151.842] SelectObject (hdc=0x27010586, h=0xd0a06eb) returned 0x18a0048 [0151.842] GetBkMode (hdc=0x27010586) returned 2 [0151.842] SetBkMode (hdc=0x27010586, mode=1) returned 2 [0151.842] DrawTextExW (in: hdc=0x27010586, lpchText="https://www.youtube.com/watch?v=Ji9IwPId5Uk", cchText=43, lprc=0xb7e4ac, format=0x100000, lpdtp=0x298cabc | out: lpchText="https://www.youtube.com/watch?v=Ji9IwPId5Uk", lprc=0xb7e4ac) returned 13 [0151.843] RestoreDC (hdc=0x27010586, nSavedDC=-1) returned 1 [0151.843] GdipReleaseDC (graphics=0x5018898, hdc=0x27010586) returned 0x0 [0151.843] GetFocus () returned 0x101c4 [0151.843] GdipSetClipRegion (graphics=0x5018898, region=0x50186d8, combineMode=0x0) returned 0x0 [0151.843] GdipDeleteBrush (brush=0x5013488) returned 0x0 [0151.843] GdipDeleteBrush (brush=0x50298b8) returned 0x0 [0151.843] GdipGetDC (graphics=0x5018898, hdc=0xb7e89c) returned 0x0 [0151.843] BitBlt (hdc=0x180106e6, x=0, y=0, cx=243, cy=13, hdcSrc=0x27010586, x1=0, y1=0, rop=0xcc0020) returned 1 [0151.843] GdipReleaseDC (graphics=0x5018898, hdc=0x27010586) returned 0x0 [0151.843] SelectPalette (hdc=0x180106e6, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.843] SelectObject (hdc=0x27010586, h=0x185000f) returned 0x1005058b [0151.843] DeleteDC (hdc=0x27010586) returned 1 [0151.843] GdipDeleteGraphics (graphics=0x5018898) returned 0x0 [0151.843] EndPaint (hWnd=0x101ae, lpPaint=0xb7e840) returned 1 [0151.843] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.844] IsWindowUnicode (hWnd=0x101b0) returned 1 [0151.844] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.844] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.844] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.844] BeginPaint (in: hWnd=0x101b0, lpPaint=0xb7e84c | out: lpPaint=0xb7e84c) returned 0x180106e6 [0151.844] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.844] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.844] CreateCompatibleDC (hdc=0x180106e6) returned 0x2a010586 [0151.844] GetObjectType (h=0x180106e6) returned 0x3 [0151.844] CreateCompatibleBitmap (hdc=0x180106e6, cx=1, cy=1) returned 0x1c0506d9 [0151.844] GetDIBits (in: hdc=0x180106e6, hbm=0x1c0506d9, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0xb7e2dc, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb7e2dc) returned 1 [0151.844] GetDIBits (in: hdc=0x180106e6, hbm=0x1c0506d9, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0xb7e2dc, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb7e2dc) returned 1 [0151.844] DeleteObject (ho=0x1c0506d9) returned 1 [0151.844] CreateDIBSection (in: hdc=0x180106e6, lpbmi=0xb7e32c, usage=0x0, ppvBits=0xb7e820, hSection=0x0, offset=0x0 | out: ppvBits=0xb7e820) returned 0x2f0506e7 [0151.844] SelectObject (hdc=0x2a010586, h=0x2f0506e7) returned 0x185000f [0151.844] GdipCreateFromHDC (hdc=0x2a010586, graphics=0xb7e804) returned 0x0 [0151.844] GdipTranslateWorldTransform (graphics=0x5018898, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0151.844] GdipSetClipRectI (graphics=0x5018898, x=0, y=0, width=328, height=73, combineMode=0x0) returned 0x0 [0151.844] GdipCreateMatrix (matrix=0xb7e8ac) returned 0x0 [0151.844] GdipGetWorldTransform (graphics=0x5018898, matrix=0x5018b78) returned 0x0 [0151.844] GdipIsMatrixIdentity (matrix=0x5018b78, result=0xb7e8c4) returned 0x0 [0151.844] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd67248 [0151.844] GdipGetMatrixElements (matrix=0x5018b78, matrixOut=0xd67248) returned 0x0 [0151.844] LocalFree (hMem=0xd67248) returned 0x0 [0151.845] GdipDeleteMatrix (matrix=0x5018b78) returned 0x0 [0151.845] GdipCreateRegion (region=0xb7e8ac) returned 0x0 [0151.845] GdipGetClip (graphics=0x5018898, region=0x50298b8) returned 0x0 [0151.845] GdipIsInfiniteRegion (region=0x50298b8, graphics=0x5018898, result=0xb7e8b8) returned 0x0 [0151.845] GdipSaveGraphics (graphics=0x5018898, state=0xb7e8e4) returned 0x0 [0151.845] GetWindowTextLengthW (hWnd=0x101b0) returned 135 [0151.845] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x87 [0151.845] GetSystemMetrics (nIndex=42) returned 0 [0151.845] GetWindowTextW (in: hWnd=0x101b0, lpString=0xb7e6f0, nMaxCount=136 | out: lpString="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n") returned 135 [0151.845] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0xd, wParam=0x88, lParam=0xb7e6f0) returned 0x87 [0151.845] GetClientRect (in: hWnd=0x101b0, lpRect=0xb7e8ac | out: lpRect=0xb7e8ac) returned 1 [0151.845] GdipCreateRegion (region=0xb7e6fc) returned 0x0 [0151.845] GdipGetClip (graphics=0x5018898, region=0x5029948) returned 0x0 [0151.845] GdipCreateMatrix (matrix=0xb7e6fc) returned 0x0 [0151.845] GdipGetWorldTransform (graphics=0x5018898, matrix=0x5018ba8) returned 0x0 [0151.845] GdipIsMatrixIdentity (matrix=0x5018ba8, result=0xb7e714) returned 0x0 [0151.845] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd67248 [0151.845] GdipGetMatrixElements (matrix=0x5018ba8, matrixOut=0xd67248) returned 0x0 [0151.845] LocalFree (hMem=0xd67248) returned 0x0 [0151.845] GdipCombineRegionRegion (region=0x5029948, region2=0x50298b8, combineMode=0x1) returned 0x0 [0151.845] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.845] GdipGetMatrixElements (matrix=0x5018ba8, matrixOut=0xd670f8) returned 0x0 [0151.845] LocalFree (hMem=0xd670f8) returned 0x0 [0151.845] GdipDeleteMatrix (matrix=0x5018ba8) returned 0x0 [0151.845] GdipIsInfiniteRegion (region=0x5029948, graphics=0x5018898, result=0xb7e740) returned 0x0 [0151.845] GdipIsInfiniteRegion (region=0x5029948, graphics=0x5018898, result=0xb7e730) returned 0x0 [0151.845] GdipGetRegionHRgn (region=0x5029948, graphics=0x5018898, hRgn=0xb7e730) returned 0x0 [0151.845] GdipDeleteRegion (region=0x5029948) returned 0x0 [0151.845] GdipGetDC (graphics=0x5018898, hdc=0xb7e748) returned 0x0 [0151.845] GetCurrentObject (hdc=0x2a010586, type=0x1) returned 0x1b00017 [0151.845] GetCurrentObject (hdc=0x2a010586, type=0x2) returned 0x1900010 [0151.845] GetCurrentObject (hdc=0x2a010586, type=0x7) returned 0x2f0506e7 [0151.845] GetCurrentObject (hdc=0x2a010586, type=0x6) returned 0x18a0048 [0151.845] SaveDC (hdc=0x2a010586) returned 1 [0151.845] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x650406e8 [0151.845] GetClipRgn (hdc=0x2a010586, hrgn=0x650406e8) returned 0 [0151.845] SelectClipRgn (hdc=0x2a010586, hrgn=0x150405a4) returned 2 [0151.845] DeleteObject (ho=0x650406e8) returned 1 [0151.845] DeleteObject (ho=0x150405a4) returned 1 [0151.846] OffsetViewportOrgEx (in: hdc=0x2a010586, x=0, y=0, lppt=0x298e240 | out: lppt=0x298e240) returned 1 [0151.846] GetNearestColor (hdc=0x2a010586, color=0x0) returned 0x0 [0151.846] CreateSolidBrush (color=0x0) returned 0x4f100572 [0151.846] FillRect (hDC=0x2a010586, lprc=0xb7e74c, hbr=0x4f100572) returned 1 [0151.846] DeleteObject (ho=0x4f100572) returned 1 [0151.846] RestoreDC (hdc=0x2a010586, nSavedDC=-1) returned 1 [0151.846] GdipReleaseDC (graphics=0x5018898, hdc=0x2a010586) returned 0x0 [0151.846] GdipRestoreGraphics (graphics=0x5018898, state=0xfd980dbd) returned 0x0 [0151.846] GdipDeleteRegion (region=0x50298b8) returned 0x0 [0151.846] GetWindowTextLengthW (hWnd=0x101b0) returned 135 [0151.846] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x87 [0151.846] GetSystemMetrics (nIndex=42) returned 0 [0151.846] GetWindowTextW (in: hWnd=0x101b0, lpString=0xb7e6f0, nMaxCount=136 | out: lpString="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n") returned 135 [0151.846] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0xd, wParam=0x88, lParam=0xb7e6f0) returned 0x87 [0151.846] GdipGetDC (graphics=0x5018898, hdc=0xb7e768) returned 0x0 [0151.846] GetCurrentObject (hdc=0x2a010586, type=0x1) returned 0x1b00017 [0151.846] GetCurrentObject (hdc=0x2a010586, type=0x2) returned 0x1900010 [0151.846] GetCurrentObject (hdc=0x2a010586, type=0x7) returned 0x2f0506e7 [0151.846] GetCurrentObject (hdc=0x2a010586, type=0x6) returned 0x18a0048 [0151.846] SaveDC (hdc=0x2a010586) returned 1 [0151.846] GetNearestColor (hdc=0x2a010586, color=0xf0f0f0) returned 0xf0f0f0 [0151.846] RestoreDC (hdc=0x2a010586, nSavedDC=-1) returned 1 [0151.846] GdipReleaseDC (graphics=0x5018898, hdc=0x2a010586) returned 0x0 [0151.847] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.847] AdjustWindowRectEx (in: lpRect=0xb7e68c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e68c) returned 1 [0151.847] SelectObject (hdc=0xd010694, h=0x5a0a06d6) returned 0xd0a06eb [0151.847] DrawTextExW (in: hdc=0xd010694, lpchText="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n", cchText=135, lprc=0xb7e678, format=0x102400, lpdtp=0x298e810 | out: lpchText="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n", lprc=0xb7e678) returned 65 [0151.847] GdipGetTextRenderingHint (graphics=0x5018898, mode=0xb7e708) returned 0x0 [0151.847] GdipGetDC (graphics=0x5018898, hdc=0xb7e6f4) returned 0x0 [0151.847] GetCurrentObject (hdc=0x2a010586, type=0x1) returned 0x1b00017 [0151.847] GetCurrentObject (hdc=0x2a010586, type=0x2) returned 0x1900010 [0151.847] GetCurrentObject (hdc=0x2a010586, type=0x7) returned 0x2f0506e7 [0151.847] GetCurrentObject (hdc=0x2a010586, type=0x6) returned 0x18a0048 [0151.847] SaveDC (hdc=0x2a010586) returned 1 [0151.847] GetTextAlign (hdc=0x2a010586) returned 0x0 [0151.847] GetTextColor (hdc=0x2a010586) returned 0x0 [0151.847] SetTextColor (hdc=0x2a010586, color=0xf0f0f0) returned 0x0 [0151.847] GetCurrentObject (hdc=0x2a010586, type=0x6) returned 0x18a0048 [0151.848] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e454 | out: pv=0xb7e454) returned 92 [0151.848] SelectObject (hdc=0x2a010586, h=0x5a0a06d6) returned 0x18a0048 [0151.848] GetBkMode (hdc=0x2a010586) returned 2 [0151.848] SetBkMode (hdc=0x2a010586, mode=1) returned 2 [0151.848] DrawTextExW (in: hdc=0x2a010586, lpchText="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n", cchText=135, lprc=0xb7e688, format=0x100000, lpdtp=0x298ea98 | out: lpchText="- Add money to your paypal account (=120)\r\n- Create bitcoin account\r\n- \r\n\r\n- With your bitcoins account, send the money to our adress\r\n", lprc=0xb7e688) returned 78 [0151.849] RestoreDC (hdc=0x2a010586, nSavedDC=-1) returned 1 [0151.849] GdipReleaseDC (graphics=0x5018898, hdc=0x2a010586) returned 0x0 [0151.849] GdipGetDC (graphics=0x5018898, hdc=0xb7e8a4) returned 0x0 [0151.849] BitBlt (hdc=0x180106e6, x=0, y=0, cx=328, cy=73, hdcSrc=0x2a010586, x1=0, y1=0, rop=0xcc0020) returned 1 [0151.849] GdipReleaseDC (graphics=0x5018898, hdc=0x2a010586) returned 0x0 [0151.849] SelectPalette (hdc=0x180106e6, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.849] SelectObject (hdc=0x2a010586, h=0x185000f) returned 0x2f0506e7 [0151.849] DeleteDC (hdc=0x2a010586) returned 1 [0151.849] GdipDeleteGraphics (graphics=0x5018898) returned 0x0 [0151.849] DeleteObject (ho=0x2f0506e7) returned 1 [0151.849] EndPaint (hWnd=0x101b0, lpPaint=0xb7e848) returned 1 [0151.849] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.849] IsWindowUnicode (hWnd=0x101b2) returned 1 [0151.849] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.850] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.850] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.850] BeginPaint (in: hWnd=0x101b2, lpPaint=0xb7e87c | out: lpPaint=0xb7e87c) returned 0x180106e6 [0151.850] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.850] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.850] GetWindowTextLengthW (hWnd=0x101b2) returned 7 [0151.850] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0151.850] GetSystemMetrics (nIndex=42) returned 0 [0151.850] GetWindowTextW (in: hWnd=0x101b2, lpString=0xb7e820, nMaxCount=8 | out: lpString="Message") returned 7 [0151.850] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0xd, wParam=0x8, lParam=0xb7e820) returned 0x7 [0151.850] GetClientRect (in: hWnd=0x101b2, lpRect=0xb7e8dc | out: lpRect=0xb7e8dc) returned 1 [0151.850] GetCurrentObject (hdc=0x180106e6, type=0x1) returned 0x1b00017 [0151.850] GetCurrentObject (hdc=0x180106e6, type=0x2) returned 0x1900010 [0151.850] GetCurrentObject (hdc=0x180106e6, type=0x7) returned 0x205056d [0151.850] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x18a0048 [0151.850] SaveDC (hdc=0x180106e6) returned 1 [0151.850] GetNearestColor (hdc=0x180106e6, color=0x0) returned 0x0 [0151.850] CreateSolidBrush (color=0x0) returned 0x50100572 [0151.850] FillRect (hDC=0x180106e6, lprc=0xb7e77c, hbr=0x50100572) returned 1 [0151.850] DeleteObject (ho=0x50100572) returned 1 [0151.850] RestoreDC (hdc=0x180106e6, nSavedDC=-1) returned 1 [0151.850] GetWindowTextLengthW (hWnd=0x101b2) returned 7 [0151.850] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0151.850] GetSystemMetrics (nIndex=42) returned 0 [0151.850] GetWindowTextW (in: hWnd=0x101b2, lpString=0xb7e820, nMaxCount=8 | out: lpString="Message") returned 7 [0151.850] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0xd, wParam=0x8, lParam=0xb7e820) returned 0x7 [0151.850] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0xb7e7dc, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96]qv3ÏÏÈ\x8bnt\x0cê·", lpUsedDefaultChar=0x0) returned 17 [0151.851] GetProcAddress (hModule=0x75810000, lpProcName="ImageList_WriteEx") returned 0x0 [0151.851] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=1) returned 0x30080588 [0151.851] GdipCreateFromHDC (hdc=0x180106e6, graphics=0xb7e700) returned 0x0 [0151.851] GdipSetPageUnit (graphics=0x5018898, unit=0x2) returned 0x0 [0151.851] GdipCreateMatrix (matrix=0xb7e6c0) returned 0x0 [0151.851] GdipGetWorldTransform (graphics=0x5018898, matrix=0x5018b78) returned 0x0 [0151.851] GdipIsMatrixIdentity (matrix=0x5018b78, result=0xb7e6d8) returned 0x0 [0151.851] GdipDeleteMatrix (matrix=0x5018b78) returned 0x0 [0151.851] GdipCreateRegion (region=0xb7e6c0) returned 0x0 [0151.851] GdipGetClip (graphics=0x5018898, region=0x50298b8) returned 0x0 [0151.851] GdipIsInfiniteRegion (region=0x50298b8, graphics=0x5018898, result=0xb7e6cc) returned 0x0 [0151.851] GdipDeleteRegion (region=0x50298b8) returned 0x0 [0151.851] GdipSaveGraphics (graphics=0x5018898, state=0xb7e6f8) returned 0x0 [0151.851] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0xb7e6dc) returned 0x0 [0151.851] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0xb7e6dc) returned 0x0 [0151.851] GdipCreateRegion (region=0xb7e67c) returned 0x0 [0151.851] GdipGetClip (graphics=0x5018898, region=0x50187f8) returned 0x0 [0151.851] GdipCreateMatrix (matrix=0xb7e67c) returned 0x0 [0151.851] GdipGetWorldTransform (graphics=0x5018898, matrix=0x5013548) returned 0x0 [0151.851] GdipIsMatrixIdentity (matrix=0x5013548, result=0xb7e694) returned 0x0 [0151.851] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.851] GdipGetMatrixElements (matrix=0x5013548, matrixOut=0xd670f8) returned 0x0 [0151.851] LocalFree (hMem=0xd670f8) returned 0x0 [0151.851] GdipDeleteMatrix (matrix=0x5013548) returned 0x0 [0151.851] GdipIsInfiniteRegion (region=0x50187f8, graphics=0x5018898, result=0xb7e6c0) returned 0x0 [0151.851] GdipDeleteRegion (region=0x50187f8) returned 0x0 [0151.851] GdipGetDC (graphics=0x5018898, hdc=0xb7e6c8) returned 0x0 [0151.851] GetCurrentObject (hdc=0x180106e6, type=0x1) returned 0x1b00017 [0151.851] GetCurrentObject (hdc=0x180106e6, type=0x2) returned 0x1900010 [0151.851] GetCurrentObject (hdc=0x180106e6, type=0x7) returned 0x205056d [0151.851] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x18a0048 [0151.852] SaveDC (hdc=0x180106e6) returned 1 [0151.852] OffsetViewportOrgEx (in: hdc=0x180106e6, x=0, y=0, lppt=0x298f0a0 | out: lppt=0x298f0a0) returned 1 [0151.852] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x18a0048 [0151.852] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e5a8 | out: pv=0xb7e5a8) returned 92 [0151.852] SelectObject (hdc=0x180106e6, h=0x5a0a06d6) returned 0x18a0048 [0151.852] DrawTextExW (in: hdc=0x180106e6, lpchText="Message", cchText=7, lprc=0xb7e6e4, format=0x102410, lpdtp=0x298f0b0 | out: lpchText="Message", lprc=0xb7e6e4) returned 13 [0151.852] GetTextAlign (hdc=0x180106e6) returned 0x0 [0151.852] GetTextColor (hdc=0x180106e6) returned 0x0 [0151.852] SetTextColor (hdc=0x180106e6, color=0xf0f0f0) returned 0x0 [0151.852] GetCurrentObject (hdc=0x180106e6, type=0x6) returned 0x5a0a06d6 [0151.852] GetObjectW (in: h=0x5a0a06d6, c=92, pv=0xb7e454 | out: pv=0xb7e454) returned 92 [0151.852] GetBkMode (hdc=0x180106e6) returned 2 [0151.852] SetBkMode (hdc=0x180106e6, mode=1) returned 2 [0151.852] DrawTextExW (in: hdc=0x180106e6, lpchText="Message", cchText=7, lprc=0xb7e688, format=0x102010, lpdtp=0x298f278 | out: lpchText="Message", lprc=0xb7e688) returned 13 [0151.852] RestoreDC (hdc=0x180106e6, nSavedDC=-1) returned 1 [0151.852] GdipReleaseDC (graphics=0x5018898, hdc=0x180106e6) returned 0x0 [0151.852] GdipDrawLineI (graphics=0x5018898, pen=0x50135b8, x1=1, y1=6, x2=1, y2=195) returned 0x0 [0151.852] GdipDrawLineI (graphics=0x5018898, pen=0x5018768, x1=0, y1=6, x2=0, y2=194) returned 0x0 [0151.853] GdipDrawLineI (graphics=0x5018898, pen=0x50135b8, x1=0, y1=195, x2=363, y2=195) returned 0x0 [0151.853] GdipDrawLineI (graphics=0x5018898, pen=0x5018768, x1=0, y1=194, x2=362, y2=194) returned 0x0 [0151.853] GdipDrawLineI (graphics=0x5018898, pen=0x5018768, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0151.853] GdipDrawLineI (graphics=0x5018898, pen=0x50135b8, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0151.853] GdipDrawLineI (graphics=0x5018898, pen=0x5018768, x1=58, y1=5, x2=361, y2=5) returned 0x0 [0151.853] GdipDrawLineI (graphics=0x5018898, pen=0x50135b8, x1=58, y1=6, x2=362, y2=6) returned 0x0 [0151.854] GdipDrawLineI (graphics=0x5018898, pen=0x50135b8, x1=362, y1=5, x2=362, y2=195) returned 0x0 [0151.854] GdipDrawLineI (graphics=0x5018898, pen=0x5018768, x1=361, y1=6, x2=361, y2=194) returned 0x0 [0151.854] GdipDeletePen (pen=0x50135b8) returned 0x0 [0151.854] GdipDeletePen (pen=0x5018768) returned 0x0 [0151.854] GdipDeleteGraphics (graphics=0x5018898) returned 0x0 [0151.854] SelectPalette (hdc=0x180106e6, hPal=0x30080588, bForceBkgd=0) returned 0x30080588 [0151.854] SelectPalette (hdc=0x180106e6, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.854] EndPaint (hWnd=0x101b2, lpPaint=0xb7e878) returned 1 [0151.854] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.854] IsWindowUnicode (hWnd=0x101b4) returned 1 [0151.854] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.854] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.854] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.854] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0151.854] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.854] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x14, wParam=0x180106e6, lParam=0x0) returned 0x1 [0151.854] SendMessageW (hWnd=0x101b4, Msg=0x2111, wParam=0x40001b4, lParam=0x101b4) returned 0x0 [0151.855] SendMessageW (hWnd=0x101b4, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0151.855] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0151.856] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.856] IsWindowUnicode (hWnd=0x101b6) returned 1 [0151.856] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.856] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.856] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.856] BeginPaint (in: hWnd=0x101b6, lpPaint=0xb7e87c | out: lpPaint=0xb7e87c) returned 0x8010579 [0151.856] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.857] SelectPalette (hdc=0x8010579, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.857] GetWindowTextLengthW (hWnd=0x101b6) returned 8 [0151.857] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0151.857] GetSystemMetrics (nIndex=42) returned 0 [0151.857] GetWindowTextW (in: hWnd=0x101b6, lpString=0xb7e81c, nMaxCount=9 | out: lpString="Bictoins") returned 8 [0151.857] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0xd, wParam=0x9, lParam=0xb7e81c) returned 0x8 [0151.857] GetClientRect (in: hWnd=0x101b6, lpRect=0xb7e8dc | out: lpRect=0xb7e8dc) returned 1 [0151.857] GetCurrentObject (hdc=0x8010579, type=0x1) returned 0x1b00017 [0151.857] GetCurrentObject (hdc=0x8010579, type=0x2) returned 0x1900010 [0151.857] GetCurrentObject (hdc=0x8010579, type=0x7) returned 0x205056d [0151.857] GetCurrentObject (hdc=0x8010579, type=0x6) returned 0x18a0048 [0151.857] SaveDC (hdc=0x8010579) returned 1 [0151.857] GetNearestColor (hdc=0x8010579, color=0x0) returned 0x0 [0151.857] CreateSolidBrush (color=0x0) returned 0x51100572 [0151.857] FillRect (hDC=0x8010579, lprc=0xb7e77c, hbr=0x51100572) returned 1 [0151.857] DeleteObject (ho=0x51100572) returned 1 [0151.857] RestoreDC (hdc=0x8010579, nSavedDC=-1) returned 1 [0151.857] GetWindowTextLengthW (hWnd=0x101b6) returned 8 [0151.857] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0151.857] GetSystemMetrics (nIndex=42) returned 0 [0151.857] GetWindowTextW (in: hWnd=0x101b6, lpString=0xb7e81c, nMaxCount=9 | out: lpString="Bictoins") returned 8 [0151.857] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0xd, wParam=0x9, lParam=0xb7e81c) returned 0x8 [0151.857] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0xb7e7dc, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96]qv3ÏÏÈ\x8bnt\x0cê·", lpUsedDefaultChar=0x0) returned 17 [0151.857] GetProcAddress (hModule=0x75810000, lpProcName="ImageList_WriteEx") returned 0x0 [0151.857] SelectPalette (hdc=0x8010579, hPal=0x30080588, bForceBkgd=1) returned 0x30080588 [0151.857] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e700) returned 0x0 [0151.858] GdipSetPageUnit (graphics=0x50187f8, unit=0x2) returned 0x0 [0151.858] GdipCreateMatrix (matrix=0xb7e6c0) returned 0x0 [0151.858] GdipGetWorldTransform (graphics=0x50187f8, matrix=0x5018cb8) returned 0x0 [0151.858] GdipIsMatrixIdentity (matrix=0x5018cb8, result=0xb7e6d8) returned 0x0 [0151.858] GdipDeleteMatrix (matrix=0x5018cb8) returned 0x0 [0151.858] GdipCreateRegion (region=0xb7e6c0) returned 0x0 [0151.858] GdipGetClip (graphics=0x50187f8, region=0x5013548) returned 0x0 [0151.858] GdipIsInfiniteRegion (region=0x5013548, graphics=0x50187f8, result=0xb7e6cc) returned 0x0 [0151.858] GdipDeleteRegion (region=0x5013548) returned 0x0 [0151.858] GdipSaveGraphics (graphics=0x50187f8, state=0xb7e6f8) returned 0x0 [0151.858] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0xb7e6dc) returned 0x0 [0151.858] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0xb7e6dc) returned 0x0 [0151.858] GdipCreateRegion (region=0xb7e67c) returned 0x0 [0151.858] GdipGetClip (graphics=0x50187f8, region=0x5018b68) returned 0x0 [0151.858] GdipCreateMatrix (matrix=0xb7e67c) returned 0x0 [0151.858] GdipGetWorldTransform (graphics=0x50187f8, matrix=0x5018bf8) returned 0x0 [0151.858] GdipIsMatrixIdentity (matrix=0x5018bf8, result=0xb7e694) returned 0x0 [0151.858] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd67248 [0151.858] GdipGetMatrixElements (matrix=0x5018bf8, matrixOut=0xd67248) returned 0x0 [0151.858] LocalFree (hMem=0xd67248) returned 0x0 [0151.858] GdipDeleteMatrix (matrix=0x5018bf8) returned 0x0 [0151.858] GdipIsInfiniteRegion (region=0x5018b68, graphics=0x50187f8, result=0xb7e6c0) returned 0x0 [0151.858] GdipDeleteRegion (region=0x5018b68) returned 0x0 [0151.858] GdipGetDC (graphics=0x50187f8, hdc=0xb7e6c8) returned 0x0 [0151.858] GetCurrentObject (hdc=0x8010579, type=0x1) returned 0x1b00017 [0151.858] GetCurrentObject (hdc=0x8010579, type=0x2) returned 0x1900010 [0151.858] GetCurrentObject (hdc=0x8010579, type=0x7) returned 0x205056d [0151.858] GetCurrentObject (hdc=0x8010579, type=0x6) returned 0x18a0048 [0151.858] SaveDC (hdc=0x8010579) returned 1 [0151.858] OffsetViewportOrgEx (in: hdc=0x8010579, x=0, y=0, lppt=0x298f898 | out: lppt=0x298f898) returned 1 [0151.858] GetCurrentObject (hdc=0x8010579, type=0x6) returned 0x18a0048 [0151.858] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e5a8 | out: pv=0xb7e5a8) returned 92 [0151.858] SelectObject (hdc=0x8010579, h=0x5a0a06d6) returned 0x18a0048 [0151.858] DrawTextExW (in: hdc=0x8010579, lpchText="Bictoins", cchText=8, lprc=0xb7e6e4, format=0x102410, lpdtp=0x298f8a8 | out: lpchText="Bictoins", lprc=0xb7e6e4) returned 13 [0151.858] GetTextAlign (hdc=0x8010579) returned 0x0 [0151.859] GetTextColor (hdc=0x8010579) returned 0x0 [0151.859] SetTextColor (hdc=0x8010579, color=0xf0f0f0) returned 0x0 [0151.859] GetCurrentObject (hdc=0x8010579, type=0x6) returned 0x5a0a06d6 [0151.859] GetObjectW (in: h=0x5a0a06d6, c=92, pv=0xb7e454 | out: pv=0xb7e454) returned 92 [0151.859] GetBkMode (hdc=0x8010579) returned 2 [0151.859] SetBkMode (hdc=0x8010579, mode=1) returned 2 [0151.859] DrawTextExW (in: hdc=0x8010579, lpchText="Bictoins", cchText=8, lprc=0xb7e688, format=0x102010, lpdtp=0x298fa70 | out: lpchText="Bictoins", lprc=0xb7e688) returned 13 [0151.859] RestoreDC (hdc=0x8010579, nSavedDC=-1) returned 1 [0151.859] GdipReleaseDC (graphics=0x50187f8, hdc=0x8010579) returned 0x0 [0151.859] GdipDrawLineI (graphics=0x50187f8, pen=0x5018768, x1=1, y1=6, x2=1, y2=59) returned 0x0 [0151.859] GdipDrawLineI (graphics=0x50187f8, pen=0x5018ad8, x1=0, y1=6, x2=0, y2=58) returned 0x0 [0151.859] GdipDrawLineI (graphics=0x50187f8, pen=0x5018768, x1=0, y1=59, x2=711, y2=59) returned 0x0 [0151.859] GdipDrawLineI (graphics=0x50187f8, pen=0x5018ad8, x1=0, y1=58, x2=710, y2=58) returned 0x0 [0151.860] GdipDrawLineI (graphics=0x50187f8, pen=0x5018ad8, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0151.860] GdipDrawLineI (graphics=0x50187f8, pen=0x5018768, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0151.860] GdipDrawLineI (graphics=0x50187f8, pen=0x5018ad8, x1=52, y1=5, x2=709, y2=5) returned 0x0 [0151.860] GdipDrawLineI (graphics=0x50187f8, pen=0x5018768, x1=52, y1=6, x2=710, y2=6) returned 0x0 [0151.860] GdipDrawLineI (graphics=0x50187f8, pen=0x5018768, x1=710, y1=5, x2=710, y2=59) returned 0x0 [0151.860] GdipDrawLineI (graphics=0x50187f8, pen=0x5018ad8, x1=709, y1=6, x2=709, y2=58) returned 0x0 [0151.861] GdipDeletePen (pen=0x5018768) returned 0x0 [0151.861] GdipDeletePen (pen=0x5018ad8) returned 0x0 [0151.861] GdipDeleteGraphics (graphics=0x50187f8) returned 0x0 [0151.861] SelectPalette (hdc=0x8010579, hPal=0x30080588, bForceBkgd=0) returned 0x30080588 [0151.861] SelectPalette (hdc=0x8010579, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.861] EndPaint (hWnd=0x101b6, lpPaint=0xb7e878) returned 1 [0151.861] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.861] IsWindowUnicode (hWnd=0x101b8) returned 1 [0151.861] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.861] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.861] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.861] BeginPaint (in: hWnd=0x101b8, lpPaint=0xb7e84c | out: lpPaint=0xb7e84c) returned 0x8010579 [0151.861] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.861] SelectPalette (hdc=0x8010579, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.861] CreateCompatibleDC (hdc=0x8010579) returned 0x2d0106d9 [0151.861] SelectObject (hdc=0x2d0106d9, h=0x1005058b) returned 0x185000f [0151.861] GdipCreateFromHDC (hdc=0x2d0106d9, graphics=0xb7e844) returned 0x0 [0151.861] GdipTranslateWorldTransform (graphics=0x5018768, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0151.861] GdipSetClipRectI (graphics=0x5018768, x=0, y=0, width=166, height=13, combineMode=0x0) returned 0x0 [0151.861] GdipCreateMatrix (matrix=0xb7e8ac) returned 0x0 [0151.861] GdipGetWorldTransform (graphics=0x5018768, matrix=0x5018a48) returned 0x0 [0151.861] GdipIsMatrixIdentity (matrix=0x5018a48, result=0xb7e8c4) returned 0x0 [0151.861] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd67248 [0151.861] GdipGetMatrixElements (matrix=0x5018a48, matrixOut=0xd67248) returned 0x0 [0151.861] LocalFree (hMem=0xd67248) returned 0x0 [0151.861] GdipDeleteMatrix (matrix=0x5018a48) returned 0x0 [0151.861] GdipCreateRegion (region=0xb7e8ac) returned 0x0 [0151.861] GdipGetClip (graphics=0x5018768, region=0x5018b68) returned 0x0 [0151.861] GdipIsInfiniteRegion (region=0x5018b68, graphics=0x5018768, result=0xb7e8b8) returned 0x0 [0151.861] GdipSaveGraphics (graphics=0x5018768, state=0xb7e8e4) returned 0x0 [0151.861] GetWindowTextLengthW (hWnd=0x101b8) returned 34 [0151.862] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0151.862] GetSystemMetrics (nIndex=42) returned 0 [0151.862] GetWindowTextW (in: hWnd=0x101b8, lpString=0xb7e7b8, nMaxCount=35 | out: lpString="Send 100$ to this bitcoins adress:") returned 34 [0151.862] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0xd, wParam=0x23, lParam=0xb7e7b8) returned 0x22 [0151.862] GetClientRect (in: hWnd=0x101b8, lpRect=0xb7e8ac | out: lpRect=0xb7e8ac) returned 1 [0151.862] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0xb7e6d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96]qv3ÏÏÈ\x8bntÜé·", lpUsedDefaultChar=0x0) returned 17 [0151.862] GetProcAddress (hModule=0x75810000, lpProcName="ImageList_WriteEx") returned 0x0 [0151.862] GdipCreateRegion (region=0xb7e6e8) returned 0x0 [0151.862] GdipGetClip (graphics=0x5018768, region=0x5013548) returned 0x0 [0151.862] GdipCreateMatrix (matrix=0xb7e6e8) returned 0x0 [0151.862] GdipGetWorldTransform (graphics=0x5018768, matrix=0x5018bf8) returned 0x0 [0151.862] GdipIsMatrixIdentity (matrix=0x5018bf8, result=0xb7e700) returned 0x0 [0151.862] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.862] GdipGetMatrixElements (matrix=0x5018bf8, matrixOut=0xd670f8) returned 0x0 [0151.862] LocalFree (hMem=0xd670f8) returned 0x0 [0151.862] GdipCombineRegionRegion (region=0x5013548, region2=0x5018b68, combineMode=0x1) returned 0x0 [0151.862] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.862] GdipGetMatrixElements (matrix=0x5018bf8, matrixOut=0xd670f8) returned 0x0 [0151.862] LocalFree (hMem=0xd670f8) returned 0x0 [0151.862] GdipDeleteMatrix (matrix=0x5018bf8) returned 0x0 [0151.862] GdipIsInfiniteRegion (region=0x5013548, graphics=0x5018768, result=0xb7e72c) returned 0x0 [0151.862] GdipIsInfiniteRegion (region=0x5013548, graphics=0x5018768, result=0xb7e71c) returned 0x0 [0151.862] GdipGetRegionHRgn (region=0x5013548, graphics=0x5018768, hRgn=0xb7e71c) returned 0x0 [0151.862] GdipDeleteRegion (region=0x5013548) returned 0x0 [0151.862] GdipGetDC (graphics=0x5018768, hdc=0xb7e734) returned 0x0 [0151.862] GetCurrentObject (hdc=0x2d0106d9, type=0x1) returned 0x1b00017 [0151.862] GetCurrentObject (hdc=0x2d0106d9, type=0x2) returned 0x1900010 [0151.862] GetCurrentObject (hdc=0x2d0106d9, type=0x7) returned 0x1005058b [0151.862] GetCurrentObject (hdc=0x2d0106d9, type=0x6) returned 0x18a0048 [0151.862] SaveDC (hdc=0x2d0106d9) returned 1 [0151.863] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x160405a4 [0151.863] GetClipRgn (hdc=0x2d0106d9, hrgn=0x160405a4) returned 0 [0151.863] SelectClipRgn (hdc=0x2d0106d9, hrgn=0x6c0406e8) returned 2 [0151.863] DeleteObject (ho=0x160405a4) returned 1 [0151.863] DeleteObject (ho=0x6c0406e8) returned 1 [0151.863] OffsetViewportOrgEx (in: hdc=0x2d0106d9, x=0, y=0, lppt=0x298ff3c | out: lppt=0x298ff3c) returned 1 [0151.863] OffsetViewportOrgEx (in: hdc=0x2d0106d9, x=-6, y=-14, lppt=0x298ff4c | out: lppt=0x298ff4c) returned 1 [0151.863] GetClientRect (in: hWnd=0x101b6, lpRect=0xb7e760 | out: lpRect=0xb7e760) returned 1 [0151.863] GetCurrentObject (hdc=0x2d0106d9, type=0x1) returned 0x1b00017 [0151.863] GetCurrentObject (hdc=0x2d0106d9, type=0x2) returned 0x1900010 [0151.863] GetCurrentObject (hdc=0x2d0106d9, type=0x7) returned 0x1005058b [0151.863] GetCurrentObject (hdc=0x2d0106d9, type=0x6) returned 0x18a0048 [0151.863] SaveDC (hdc=0x2d0106d9) returned 2 [0151.863] GetNearestColor (hdc=0x2d0106d9, color=0x0) returned 0x0 [0151.863] CreateSolidBrush (color=0x0) returned 0x52100572 [0151.863] FillRect (hDC=0x2d0106d9, lprc=0xb7e600, hbr=0x52100572) returned 1 [0151.863] DeleteObject (ho=0x52100572) returned 1 [0151.863] RestoreDC (hdc=0x2d0106d9, nSavedDC=-1) returned 1 [0151.863] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0xb7e660, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96]qv3ÏÏÈ\x8bntÜé·", lpUsedDefaultChar=0x0) returned 17 [0151.863] GetProcAddress (hModule=0x75810000, lpProcName="ImageList_WriteEx") returned 0x0 [0151.863] SelectPalette (hdc=0x2d0106d9, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.863] GdipCreateFromHDC (hdc=0x2d0106d9, graphics=0xb7e584) returned 0x0 [0151.863] GdipSetPageUnit (graphics=0x5029cd8, unit=0x2) returned 0x0 [0151.863] GdipCreateMatrix (matrix=0xb7e544) returned 0x0 [0151.863] GdipGetWorldTransform (graphics=0x5029cd8, matrix=0x5013548) returned 0x0 [0151.864] GdipIsMatrixIdentity (matrix=0x5013548, result=0xb7e55c) returned 0x0 [0151.864] GdipDeleteMatrix (matrix=0x5013548) returned 0x0 [0151.864] GdipCreateRegion (region=0xb7e544) returned 0x0 [0151.864] GdipGetClip (graphics=0x5029cd8, region=0x5013578) returned 0x0 [0151.864] GdipIsInfiniteRegion (region=0x5013578, graphics=0x5029cd8, result=0xb7e550) returned 0x0 [0151.864] GdipDeleteRegion (region=0x5013578) returned 0x0 [0151.864] GdipSaveGraphics (graphics=0x5029cd8, state=0xb7e57c) returned 0x0 [0151.864] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0xb7e560) returned 0x0 [0151.864] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0xb7e560) returned 0x0 [0151.864] GdipCreateRegion (region=0xb7e500) returned 0x0 [0151.864] GdipGetClip (graphics=0x5029cd8, region=0x502a218) returned 0x0 [0151.864] GdipCreateMatrix (matrix=0xb7e500) returned 0x0 [0151.865] GdipGetWorldTransform (graphics=0x5029cd8, matrix=0x5018bf8) returned 0x0 [0151.865] GdipIsMatrixIdentity (matrix=0x5018bf8, result=0xb7e518) returned 0x0 [0151.865] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.865] GdipGetMatrixElements (matrix=0x5018bf8, matrixOut=0xd670f8) returned 0x0 [0151.865] LocalFree (hMem=0xd670f8) returned 0x0 [0151.865] GdipDeleteMatrix (matrix=0x5018bf8) returned 0x0 [0151.865] GdipIsInfiniteRegion (region=0x502a218, graphics=0x5029cd8, result=0xb7e544) returned 0x0 [0151.865] GdipDeleteRegion (region=0x502a218) returned 0x0 [0151.865] GdipGetDC (graphics=0x5029cd8, hdc=0xb7e54c) returned 0x0 [0151.865] GetCurrentObject (hdc=0x2d0106d9, type=0x1) returned 0x1b00017 [0151.865] GetCurrentObject (hdc=0x2d0106d9, type=0x2) returned 0x1900010 [0151.865] GetCurrentObject (hdc=0x2d0106d9, type=0x7) returned 0x1005058b [0151.865] GetCurrentObject (hdc=0x2d0106d9, type=0x6) returned 0x18a0048 [0151.865] SaveDC (hdc=0x2d0106d9) returned 2 [0151.865] OffsetViewportOrgEx (in: hdc=0x2d0106d9, x=0, y=0, lppt=0x2990358 | out: lppt=0x2990358) returned 1 [0151.865] GetWindowTextLengthW (hWnd=0x101b6) returned 8 [0151.865] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0151.865] GetSystemMetrics (nIndex=42) returned 0 [0151.865] GetWindowTextW (in: hWnd=0x101b6, lpString=0xb7e4c8, nMaxCount=9 | out: lpString="Bictoins") returned 8 [0151.865] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0xd, wParam=0x9, lParam=0xb7e4c8) returned 0x8 [0151.865] GetCurrentObject (hdc=0x2d0106d9, type=0x6) returned 0x18a0048 [0151.865] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e42c | out: pv=0xb7e42c) returned 92 [0151.865] SelectObject (hdc=0x2d0106d9, h=0x5a0a06d6) returned 0x18a0048 [0151.865] DrawTextExW (in: hdc=0x2d0106d9, lpchText="Bictoins", cchText=8, lprc=0xb7e568, format=0x102410, lpdtp=0x29903f0 | out: lpchText="Bictoins", lprc=0xb7e568) returned 13 [0151.865] GetWindowTextLengthW (hWnd=0x101b6) returned 8 [0151.865] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0151.865] GetSystemMetrics (nIndex=42) returned 0 [0151.865] GetWindowTextW (in: hWnd=0x101b6, lpString=0xb7e4c8, nMaxCount=9 | out: lpString="Bictoins") returned 8 [0151.865] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0xd, wParam=0x9, lParam=0xb7e4c8) returned 0x8 [0151.865] GetTextAlign (hdc=0x2d0106d9) returned 0x0 [0151.865] GetTextColor (hdc=0x2d0106d9) returned 0x0 [0151.865] SetTextColor (hdc=0x2d0106d9, color=0xf0f0f0) returned 0x0 [0151.865] GetCurrentObject (hdc=0x2d0106d9, type=0x6) returned 0x5a0a06d6 [0151.865] GetObjectW (in: h=0x5a0a06d6, c=92, pv=0xb7e2d8 | out: pv=0xb7e2d8) returned 92 [0151.866] GetBkMode (hdc=0x2d0106d9) returned 2 [0151.866] SetBkMode (hdc=0x2d0106d9, mode=1) returned 2 [0151.866] DrawTextExW (in: hdc=0x2d0106d9, lpchText="Bictoins", cchText=8, lprc=0xb7e50c, format=0x102010, lpdtp=0x2990640 | out: lpchText="Bictoins", lprc=0xb7e50c) returned 13 [0151.866] RestoreDC (hdc=0x2d0106d9, nSavedDC=-1) returned 1 [0151.866] GdipReleaseDC (graphics=0x5029cd8, hdc=0x2d0106d9) returned 0x0 [0151.866] GdipDrawLineI (graphics=0x5029cd8, pen=0x5018ad8, x1=1, y1=6, x2=1, y2=59) returned 0x0 [0151.866] GdipDrawLineI (graphics=0x5029cd8, pen=0x5013578, x1=0, y1=6, x2=0, y2=58) returned 0x0 [0151.866] GdipDrawLineI (graphics=0x5029cd8, pen=0x5018ad8, x1=0, y1=59, x2=711, y2=59) returned 0x0 [0151.866] GdipDrawLineI (graphics=0x5029cd8, pen=0x5013578, x1=0, y1=58, x2=710, y2=58) returned 0x0 [0151.866] GdipDrawLineI (graphics=0x5029cd8, pen=0x5013578, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0151.866] GdipDrawLineI (graphics=0x5029cd8, pen=0x5018ad8, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0151.866] GdipDrawLineI (graphics=0x5029cd8, pen=0x5013578, x1=52, y1=5, x2=709, y2=5) returned 0x0 [0151.866] GdipDrawLineI (graphics=0x5029cd8, pen=0x5018ad8, x1=52, y1=6, x2=710, y2=6) returned 0x0 [0151.866] GdipDrawLineI (graphics=0x5029cd8, pen=0x5018ad8, x1=710, y1=5, x2=710, y2=59) returned 0x0 [0151.866] GdipDrawLineI (graphics=0x5029cd8, pen=0x5013578, x1=709, y1=6, x2=709, y2=58) returned 0x0 [0151.866] GdipDeletePen (pen=0x5018ad8) returned 0x0 [0151.866] GdipDeletePen (pen=0x5013578) returned 0x0 [0151.866] GdipDeleteGraphics (graphics=0x5029cd8) returned 0x0 [0151.866] SelectPalette (hdc=0x2d0106d9, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.866] RestoreDC (hdc=0x2d0106d9, nSavedDC=-1) returned 1 [0151.866] GdipReleaseDC (graphics=0x5018768, hdc=0x2d0106d9) returned 0x0 [0151.866] GdipRestoreGraphics (graphics=0x5018768, state=0xfd920dbd) returned 0x0 [0151.866] GdipDeleteRegion (region=0x5018b68) returned 0x0 [0151.866] GetWindowTextLengthW (hWnd=0x101b8) returned 34 [0151.866] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0151.866] GetSystemMetrics (nIndex=42) returned 0 [0151.866] GetWindowTextW (in: hWnd=0x101b8, lpString=0xb7e7b8, nMaxCount=35 | out: lpString="Send 100$ to this bitcoins adress:") returned 34 [0151.866] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0xd, wParam=0x23, lParam=0xb7e7b8) returned 0x22 [0151.866] GdipGetDC (graphics=0x5018768, hdc=0xb7e768) returned 0x0 [0151.867] GetCurrentObject (hdc=0x2d0106d9, type=0x1) returned 0x1b00017 [0151.867] GetCurrentObject (hdc=0x2d0106d9, type=0x2) returned 0x1900010 [0151.867] GetCurrentObject (hdc=0x2d0106d9, type=0x7) returned 0x1005058b [0151.867] GetCurrentObject (hdc=0x2d0106d9, type=0x6) returned 0x18a0048 [0151.867] SaveDC (hdc=0x2d0106d9) returned 1 [0151.867] GetNearestColor (hdc=0x2d0106d9, color=0xff) returned 0xff [0151.867] RestoreDC (hdc=0x2d0106d9, nSavedDC=-1) returned 1 [0151.867] GdipReleaseDC (graphics=0x5018768, hdc=0x2d0106d9) returned 0x0 [0151.867] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.867] AdjustWindowRectEx (in: lpRect=0xb7e68c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e68c) returned 1 [0151.867] GdipGetTextRenderingHint (graphics=0x5018768, mode=0xb7e708) returned 0x0 [0151.867] GdipGetDC (graphics=0x5018768, hdc=0xb7e6f4) returned 0x0 [0151.867] GetCurrentObject (hdc=0x2d0106d9, type=0x1) returned 0x1b00017 [0151.867] GetCurrentObject (hdc=0x2d0106d9, type=0x2) returned 0x1900010 [0151.867] GetCurrentObject (hdc=0x2d0106d9, type=0x7) returned 0x1005058b [0151.867] GetCurrentObject (hdc=0x2d0106d9, type=0x6) returned 0x18a0048 [0151.867] SaveDC (hdc=0x2d0106d9) returned 1 [0151.867] GetTextAlign (hdc=0x2d0106d9) returned 0x0 [0151.867] GetTextColor (hdc=0x2d0106d9) returned 0x0 [0151.867] SetTextColor (hdc=0x2d0106d9, color=0xff) returned 0x0 [0151.867] GetCurrentObject (hdc=0x2d0106d9, type=0x6) returned 0x18a0048 [0151.867] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e454 | out: pv=0xb7e454) returned 92 [0151.867] SelectObject (hdc=0x2d0106d9, h=0x5a0a06d6) returned 0x18a0048 [0151.867] GetBkMode (hdc=0x2d0106d9) returned 2 [0151.867] SetBkMode (hdc=0x2d0106d9, mode=1) returned 2 [0151.867] DrawTextExW (in: hdc=0x2d0106d9, lpchText="Send 100$ to this bitcoins adress:", cchText=34, lprc=0xb7e688, format=0x100000, lpdtp=0x2990b8c | out: lpchText="Send 100$ to this bitcoins adress:", lprc=0xb7e688) returned 13 [0151.868] RestoreDC (hdc=0x2d0106d9, nSavedDC=-1) returned 1 [0151.868] GdipReleaseDC (graphics=0x5018768, hdc=0x2d0106d9) returned 0x0 [0151.868] GdipGetDC (graphics=0x5018768, hdc=0xb7e8a4) returned 0x0 [0151.868] BitBlt (hdc=0x8010579, x=0, y=0, cx=166, cy=13, hdcSrc=0x2d0106d9, x1=0, y1=0, rop=0xcc0020) returned 1 [0151.868] GdipReleaseDC (graphics=0x5018768, hdc=0x2d0106d9) returned 0x0 [0151.868] SelectPalette (hdc=0x8010579, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.868] SelectObject (hdc=0x2d0106d9, h=0x185000f) returned 0x1005058b [0151.868] DeleteDC (hdc=0x2d0106d9) returned 1 [0151.868] GdipDeleteGraphics (graphics=0x5018768) returned 0x0 [0151.868] EndPaint (hWnd=0x101b8, lpPaint=0xb7e848) returned 1 [0151.868] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.868] IsWindowUnicode (hWnd=0x101ba) returned 1 [0151.868] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.868] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.868] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x1 [0151.868] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0151.868] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.868] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x14, wParam=0x8010579, lParam=0x0) returned 0x1 [0151.868] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0x138, wParam=0x8010579, lParam=0x101ba) returned 0x1100074 [0151.868] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0x138, wParam=0x8010579, lParam=0x101ba) returned 0x1100074 [0151.869] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.869] IsWindowUnicode (hWnd=0x101bc) returned 1 [0151.869] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.869] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.869] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.869] BeginPaint (in: hWnd=0x101bc, lpPaint=0xb7e87c | out: lpPaint=0xb7e87c) returned 0x8010579 [0151.869] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.870] SelectPalette (hdc=0x8010579, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.870] GetWindowTextLengthW (hWnd=0x101bc) returned 4 [0151.870] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0151.870] GetSystemMetrics (nIndex=42) returned 0 [0151.870] GetWindowTextW (in: hWnd=0x101bc, lpString=0xb7e824, nMaxCount=5 | out: lpString="Time") returned 4 [0151.870] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0xd, wParam=0x5, lParam=0xb7e824) returned 0x4 [0151.870] GetClientRect (in: hWnd=0x101bc, lpRect=0xb7e8dc | out: lpRect=0xb7e8dc) returned 1 [0151.870] GetCurrentObject (hdc=0x8010579, type=0x1) returned 0x1b00017 [0151.870] GetCurrentObject (hdc=0x8010579, type=0x2) returned 0x1900010 [0151.870] GetCurrentObject (hdc=0x8010579, type=0x7) returned 0x205056d [0151.870] GetCurrentObject (hdc=0x8010579, type=0x6) returned 0x18a0048 [0151.870] SaveDC (hdc=0x8010579) returned 1 [0151.870] GetNearestColor (hdc=0x8010579, color=0x0) returned 0x0 [0151.870] CreateSolidBrush (color=0x0) returned 0x53100572 [0151.870] FillRect (hDC=0x8010579, lprc=0xb7e77c, hbr=0x53100572) returned 1 [0151.870] DeleteObject (ho=0x53100572) returned 1 [0151.870] RestoreDC (hdc=0x8010579, nSavedDC=-1) returned 1 [0151.870] GetWindowTextLengthW (hWnd=0x101bc) returned 4 [0151.870] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0151.870] GetSystemMetrics (nIndex=42) returned 0 [0151.870] GetWindowTextW (in: hWnd=0x101bc, lpString=0xb7e824, nMaxCount=5 | out: lpString="Time") returned 4 [0151.870] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0xd, wParam=0x5, lParam=0xb7e824) returned 0x4 [0151.870] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0xb7e7dc, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96]qv3ÏÏÈ\x8bnt\x0cê·", lpUsedDefaultChar=0x0) returned 17 [0151.870] GetProcAddress (hModule=0x75810000, lpProcName="ImageList_WriteEx") returned 0x0 [0151.870] SelectPalette (hdc=0x8010579, hPal=0x30080588, bForceBkgd=1) returned 0x30080588 [0151.870] GdipCreateFromHDC (hdc=0x8010579, graphics=0xb7e700) returned 0x0 [0151.870] GdipSetPageUnit (graphics=0x5018768, unit=0x2) returned 0x0 [0151.871] GdipCreateMatrix (matrix=0xb7e6c0) returned 0x0 [0151.871] GdipGetWorldTransform (graphics=0x5018768, matrix=0x5013548) returned 0x0 [0151.871] GdipIsMatrixIdentity (matrix=0x5013548, result=0xb7e6d8) returned 0x0 [0151.871] GdipDeleteMatrix (matrix=0x5013548) returned 0x0 [0151.871] GdipCreateRegion (region=0xb7e6c0) returned 0x0 [0151.871] GdipGetClip (graphics=0x5018768, region=0x50298b8) returned 0x0 [0151.871] GdipIsInfiniteRegion (region=0x50298b8, graphics=0x5018768, result=0xb7e6cc) returned 0x0 [0151.871] GdipDeleteRegion (region=0x50298b8) returned 0x0 [0151.871] GdipSaveGraphics (graphics=0x5018768, state=0xb7e6f8) returned 0x0 [0151.871] GdipCreatePen1 (color=0xff7f7f7f, width=0x3f800000, unit=0x0, pen=0xb7e6dc) returned 0x0 [0151.871] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0xb7e6dc) returned 0x0 [0151.871] GdipCreateRegion (region=0xb7e67c) returned 0x0 [0151.871] GdipGetClip (graphics=0x5018768, region=0x50134a8) returned 0x0 [0151.871] GdipCreateMatrix (matrix=0xb7e67c) returned 0x0 [0151.871] GdipGetWorldTransform (graphics=0x5018768, matrix=0x5013608) returned 0x0 [0151.871] GdipIsMatrixIdentity (matrix=0x5013608, result=0xb7e694) returned 0x0 [0151.871] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd67248 [0151.871] GdipGetMatrixElements (matrix=0x5013608, matrixOut=0xd67248) returned 0x0 [0151.871] LocalFree (hMem=0xd67248) returned 0x0 [0151.871] GdipDeleteMatrix (matrix=0x5013608) returned 0x0 [0151.871] GdipIsInfiniteRegion (region=0x50134a8, graphics=0x5018768, result=0xb7e6c0) returned 0x0 [0151.871] GdipDeleteRegion (region=0x50134a8) returned 0x0 [0151.871] GdipGetDC (graphics=0x5018768, hdc=0xb7e6c8) returned 0x0 [0151.871] GetCurrentObject (hdc=0x8010579, type=0x1) returned 0x1b00017 [0151.871] GetCurrentObject (hdc=0x8010579, type=0x2) returned 0x1900010 [0151.871] GetCurrentObject (hdc=0x8010579, type=0x7) returned 0x205056d [0151.871] GetCurrentObject (hdc=0x8010579, type=0x6) returned 0x18a0048 [0151.871] SaveDC (hdc=0x8010579) returned 1 [0151.871] OffsetViewportOrgEx (in: hdc=0x8010579, x=0, y=0, lppt=0x2991100 | out: lppt=0x2991100) returned 1 [0151.871] GetCurrentObject (hdc=0x8010579, type=0x6) returned 0x18a0048 [0151.871] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e5a8 | out: pv=0xb7e5a8) returned 92 [0151.871] SelectObject (hdc=0x8010579, h=0x5a0a06d6) returned 0x18a0048 [0151.871] DrawTextExW (in: hdc=0x8010579, lpchText="Time", cchText=4, lprc=0xb7e6e4, format=0x102410, lpdtp=0x2991110 | out: lpchText="Time", lprc=0xb7e6e4) returned 13 [0151.871] GetTextAlign (hdc=0x8010579) returned 0x0 [0151.872] GetTextColor (hdc=0x8010579) returned 0x0 [0151.872] SetTextColor (hdc=0x8010579, color=0xf0f0f0) returned 0x0 [0151.872] GetCurrentObject (hdc=0x8010579, type=0x6) returned 0x5a0a06d6 [0151.872] GetObjectW (in: h=0x5a0a06d6, c=92, pv=0xb7e454 | out: pv=0xb7e454) returned 92 [0151.872] GetBkMode (hdc=0x8010579) returned 2 [0151.872] SetBkMode (hdc=0x8010579, mode=1) returned 2 [0151.872] DrawTextExW (in: hdc=0x8010579, lpchText="Time", cchText=4, lprc=0xb7e688, format=0x102010, lpdtp=0x29912d8 | out: lpchText="Time", lprc=0xb7e688) returned 13 [0151.872] RestoreDC (hdc=0x8010579, nSavedDC=-1) returned 1 [0151.872] GdipReleaseDC (graphics=0x5018768, hdc=0x8010579) returned 0x0 [0151.872] GdipDrawLineI (graphics=0x5018768, pen=0x5013578, x1=1, y1=6, x2=1, y2=93) returned 0x0 [0151.872] GdipDrawLineI (graphics=0x5018768, pen=0x5013418, x1=0, y1=6, x2=0, y2=92) returned 0x0 [0151.872] GdipDrawLineI (graphics=0x5018768, pen=0x5013578, x1=0, y1=93, x2=340, y2=93) returned 0x0 [0151.872] GdipDrawLineI (graphics=0x5018768, pen=0x5013418, x1=0, y1=92, x2=339, y2=92) returned 0x0 [0151.873] GdipDrawLineI (graphics=0x5018768, pen=0x5013418, x1=0, y1=5, x2=8, y2=5) returned 0x0 [0151.873] GdipDrawLineI (graphics=0x5018768, pen=0x5013578, x1=1, y1=6, x2=8, y2=6) returned 0x0 [0151.873] GdipDrawLineI (graphics=0x5018768, pen=0x5013418, x1=38, y1=5, x2=338, y2=5) returned 0x0 [0151.873] GdipDrawLineI (graphics=0x5018768, pen=0x5013578, x1=38, y1=6, x2=339, y2=6) returned 0x0 [0151.873] GdipDrawLineI (graphics=0x5018768, pen=0x5013578, x1=339, y1=5, x2=339, y2=93) returned 0x0 [0151.873] GdipDrawLineI (graphics=0x5018768, pen=0x5013418, x1=338, y1=6, x2=338, y2=92) returned 0x0 [0151.873] GdipDeletePen (pen=0x5013578) returned 0x0 [0151.874] GdipDeletePen (pen=0x5013418) returned 0x0 [0151.874] GdipDeleteGraphics (graphics=0x5018768) returned 0x0 [0151.874] SelectPalette (hdc=0x8010579, hPal=0x30080588, bForceBkgd=0) returned 0x30080588 [0151.874] SelectPalette (hdc=0x8010579, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.874] EndPaint (hWnd=0x101bc, lpPaint=0xb7e878) returned 1 [0151.874] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.874] IsWindowUnicode (hWnd=0x101be) returned 1 [0151.874] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.874] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.874] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.874] BeginPaint (in: hWnd=0x101be, lpPaint=0xb7e84c | out: lpPaint=0xb7e84c) returned 0x8010579 [0151.874] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.874] SelectPalette (hdc=0x8010579, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.874] CreateCompatibleDC (hdc=0x8010579) returned 0x370106d9 [0151.874] DeleteObject (ho=0x1005058b) returned 1 [0151.874] GetObjectType (h=0x8010579) returned 0x3 [0151.874] CreateCompatibleBitmap (hdc=0x8010579, cx=1, cy=1) returned 0x26050587 [0151.874] GetDIBits (in: hdc=0x8010579, hbm=0x26050587, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0xb7e31c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb7e31c) returned 1 [0151.874] GetDIBits (in: hdc=0x8010579, hbm=0x26050587, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0xb7e31c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb7e31c) returned 1 [0151.874] DeleteObject (ho=0x26050587) returned 1 [0151.874] CreateDIBSection (in: hdc=0x8010579, lpbmi=0xb7e36c, usage=0x0, ppvBits=0xb7e860, hSection=0x0, offset=0x0 | out: ppvBits=0xb7e860) returned 0x1105058b [0151.874] SelectObject (hdc=0x370106d9, h=0x1105058b) returned 0x185000f [0151.874] GdipCreateFromHDC (hdc=0x370106d9, graphics=0xb7e844) returned 0x0 [0151.875] GdipTranslateWorldTransform (graphics=0x5018768, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0151.875] GdipSetClipRectI (graphics=0x5018768, x=0, y=0, width=328, height=23, combineMode=0x0) returned 0x0 [0151.875] GdipCreateMatrix (matrix=0xb7e8ac) returned 0x0 [0151.875] GdipGetWorldTransform (graphics=0x5018768, matrix=0x5018b78) returned 0x0 [0151.875] GdipIsMatrixIdentity (matrix=0x5018b78, result=0xb7e8c4) returned 0x0 [0151.875] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.875] GdipGetMatrixElements (matrix=0x5018b78, matrixOut=0xd670f8) returned 0x0 [0151.875] LocalFree (hMem=0xd670f8) returned 0x0 [0151.875] GdipDeleteMatrix (matrix=0x5018b78) returned 0x0 [0151.875] GdipCreateRegion (region=0xb7e8ac) returned 0x0 [0151.875] GdipGetClip (graphics=0x5018768, region=0x50298b8) returned 0x0 [0151.875] GdipIsInfiniteRegion (region=0x50298b8, graphics=0x5018768, result=0xb7e8b8) returned 0x0 [0151.875] GdipSaveGraphics (graphics=0x5018768, state=0xb7e8e4) returned 0x0 [0151.875] GetWindowTextLengthW (hWnd=0x101be) returned 37 [0151.875] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x25 [0151.875] GetSystemMetrics (nIndex=42) returned 0 [0151.875] GetWindowTextW (in: hWnd=0x101be, lpString=0xb7e7b4, nMaxCount=38 | out: lpString="Your files will deleted after 29 days") returned 37 [0151.875] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0xd, wParam=0x26, lParam=0xb7e7b4) returned 0x25 [0151.875] GetClientRect (in: hWnd=0x101be, lpRect=0xb7e8ac | out: lpRect=0xb7e8ac) returned 1 [0151.875] GdipCreateRegion (region=0xb7e6fc) returned 0x0 [0151.875] GdipGetClip (graphics=0x5018768, region=0x5029948) returned 0x0 [0151.875] GdipCreateMatrix (matrix=0xb7e6fc) returned 0x0 [0151.875] GdipGetWorldTransform (graphics=0x5018768, matrix=0x5018ba8) returned 0x0 [0151.875] GdipIsMatrixIdentity (matrix=0x5018ba8, result=0xb7e714) returned 0x0 [0151.875] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.875] GdipGetMatrixElements (matrix=0x5018ba8, matrixOut=0xd670f8) returned 0x0 [0151.875] LocalFree (hMem=0xd670f8) returned 0x0 [0151.875] GdipCombineRegionRegion (region=0x5029948, region2=0x50298b8, combineMode=0x1) returned 0x0 [0151.875] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd67248 [0151.875] GdipGetMatrixElements (matrix=0x5018ba8, matrixOut=0xd67248) returned 0x0 [0151.875] LocalFree (hMem=0xd67248) returned 0x0 [0151.875] GdipDeleteMatrix (matrix=0x5018ba8) returned 0x0 [0151.875] GdipIsInfiniteRegion (region=0x5029948, graphics=0x5018768, result=0xb7e740) returned 0x0 [0151.875] GdipIsInfiniteRegion (region=0x5029948, graphics=0x5018768, result=0xb7e730) returned 0x0 [0151.875] GdipGetRegionHRgn (region=0x5029948, graphics=0x5018768, hRgn=0xb7e730) returned 0x0 [0151.875] GdipDeleteRegion (region=0x5029948) returned 0x0 [0151.875] GdipGetDC (graphics=0x5018768, hdc=0xb7e748) returned 0x0 [0151.875] GetCurrentObject (hdc=0x370106d9, type=0x1) returned 0x1b00017 [0151.875] GetCurrentObject (hdc=0x370106d9, type=0x2) returned 0x1900010 [0151.876] GetCurrentObject (hdc=0x370106d9, type=0x7) returned 0x1105058b [0151.876] GetCurrentObject (hdc=0x370106d9, type=0x6) returned 0x18a0048 [0151.876] SaveDC (hdc=0x370106d9) returned 1 [0151.876] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6d0406e8 [0151.876] GetClipRgn (hdc=0x370106d9, hrgn=0x6d0406e8) returned 0 [0151.876] SelectClipRgn (hdc=0x370106d9, hrgn=0x1c0405a4) returned 2 [0151.876] DeleteObject (ho=0x6d0406e8) returned 1 [0151.876] DeleteObject (ho=0x1c0405a4) returned 1 [0151.876] OffsetViewportOrgEx (in: hdc=0x370106d9, x=0, y=0, lppt=0x29927cc | out: lppt=0x29927cc) returned 1 [0151.876] GetNearestColor (hdc=0x370106d9, color=0x0) returned 0x0 [0151.876] CreateSolidBrush (color=0x0) returned 0x54100572 [0151.876] FillRect (hDC=0x370106d9, lprc=0xb7e74c, hbr=0x54100572) returned 1 [0151.876] DeleteObject (ho=0x54100572) returned 1 [0151.876] RestoreDC (hdc=0x370106d9, nSavedDC=-1) returned 1 [0151.876] GdipReleaseDC (graphics=0x5018768, hdc=0x370106d9) returned 0x0 [0151.876] GdipRestoreGraphics (graphics=0x5018768, state=0xfd8c0dbd) returned 0x0 [0151.876] GdipDeleteRegion (region=0x50298b8) returned 0x0 [0151.876] GetWindowTextLengthW (hWnd=0x101be) returned 37 [0151.876] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x25 [0151.876] GetSystemMetrics (nIndex=42) returned 0 [0151.876] GetWindowTextW (in: hWnd=0x101be, lpString=0xb7e7b4, nMaxCount=38 | out: lpString="Your files will deleted after 29 days") returned 37 [0151.876] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0xd, wParam=0x26, lParam=0xb7e7b4) returned 0x25 [0151.876] GdipGetDC (graphics=0x5018768, hdc=0xb7e768) returned 0x0 [0151.876] GetCurrentObject (hdc=0x370106d9, type=0x1) returned 0x1b00017 [0151.876] GetCurrentObject (hdc=0x370106d9, type=0x2) returned 0x1900010 [0151.876] GetCurrentObject (hdc=0x370106d9, type=0x7) returned 0x1105058b [0151.876] GetCurrentObject (hdc=0x370106d9, type=0x6) returned 0x18a0048 [0151.876] SaveDC (hdc=0x370106d9) returned 1 [0151.876] GetNearestColor (hdc=0x370106d9, color=0xf0f0f0) returned 0xf0f0f0 [0151.876] RestoreDC (hdc=0x370106d9, nSavedDC=-1) returned 1 [0151.876] GdipReleaseDC (graphics=0x5018768, hdc=0x370106d9) returned 0x0 [0151.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75810000 [0151.877] AdjustWindowRectEx (in: lpRect=0xb7e68c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb7e68c) returned 1 [0151.877] DrawTextExW (in: hdc=0xd010694, lpchText="Your files will deleted after 29 days", cchText=37, lprc=0xb7e678, format=0x102400, lpdtp=0x2992b50 | out: lpchText="Your files will deleted after 29 days", lprc=0xb7e678) returned 13 [0151.877] GdipGetTextRenderingHint (graphics=0x5018768, mode=0xb7e708) returned 0x0 [0151.877] GdipGetDC (graphics=0x5018768, hdc=0xb7e6f4) returned 0x0 [0151.877] GetCurrentObject (hdc=0x370106d9, type=0x1) returned 0x1b00017 [0151.877] GetCurrentObject (hdc=0x370106d9, type=0x2) returned 0x1900010 [0151.877] GetCurrentObject (hdc=0x370106d9, type=0x7) returned 0x1105058b [0151.877] GetCurrentObject (hdc=0x370106d9, type=0x6) returned 0x18a0048 [0151.877] SaveDC (hdc=0x370106d9) returned 1 [0151.877] GetTextAlign (hdc=0x370106d9) returned 0x0 [0151.877] GetTextColor (hdc=0x370106d9) returned 0x0 [0151.877] SetTextColor (hdc=0x370106d9, color=0xf0f0f0) returned 0x0 [0151.877] GetCurrentObject (hdc=0x370106d9, type=0x6) returned 0x18a0048 [0151.877] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e454 | out: pv=0xb7e454) returned 92 [0151.877] SelectObject (hdc=0x370106d9, h=0x5a0a06d6) returned 0x18a0048 [0151.877] GetBkMode (hdc=0x370106d9) returned 2 [0151.878] SetBkMode (hdc=0x370106d9, mode=1) returned 2 [0151.878] DrawTextExW (in: hdc=0x370106d9, lpchText="Your files will deleted after 29 days", cchText=37, lprc=0xb7e688, format=0x100000, lpdtp=0x2992dd8 | out: lpchText="Your files will deleted after 29 days", lprc=0xb7e688) returned 13 [0151.878] RestoreDC (hdc=0x370106d9, nSavedDC=-1) returned 1 [0151.878] GdipReleaseDC (graphics=0x5018768, hdc=0x370106d9) returned 0x0 [0151.878] GdipGetDC (graphics=0x5018768, hdc=0xb7e8a4) returned 0x0 [0151.878] BitBlt (hdc=0x8010579, x=0, y=0, cx=328, cy=23, hdcSrc=0x370106d9, x1=0, y1=0, rop=0xcc0020) returned 1 [0151.878] GdipReleaseDC (graphics=0x5018768, hdc=0x370106d9) returned 0x0 [0151.878] SelectPalette (hdc=0x8010579, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.878] SelectObject (hdc=0x370106d9, h=0x185000f) returned 0x1105058b [0151.878] DeleteDC (hdc=0x370106d9) returned 1 [0151.878] GdipDeleteGraphics (graphics=0x5018768) returned 0x0 [0151.878] EndPaint (hWnd=0x101be, lpPaint=0xb7e848) returned 1 [0151.878] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.878] IsWindowUnicode (hWnd=0x101c0) returned 1 [0151.878] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.878] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.878] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.878] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0151.878] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.878] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x14, wParam=0x8010579, lParam=0x0) returned 0x1 [0151.878] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.878] IsWindowUnicode (hWnd=0x101c2) returned 1 [0151.878] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.878] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.879] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.879] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0151.879] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.879] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x14, wParam=0x8010579, lParam=0x0) returned 0x1 [0151.879] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.879] IsWindowUnicode (hWnd=0x101c4) returned 1 [0151.879] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.879] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.879] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.879] BeginPaint (in: hWnd=0x101c4, lpPaint=0xb7e840 | out: lpPaint=0xb7e840) returned 0x8010579 [0151.879] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0151.879] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x14, wParam=0x8010579, lParam=0x0) returned 0x1 [0151.879] GetStockObject (i=5) returned 0x1900015 [0151.879] SelectPalette (hdc=0x8010579, hPal=0x30080588, bForceBkgd=1) returned 0x188000b [0151.879] CreateCompatibleDC (hdc=0x8010579) returned 0x3e0106d9 [0151.879] GetObjectType (h=0x8010579) returned 0x3 [0151.879] CreateCompatibleBitmap (hdc=0x8010579, cx=1, cy=1) returned 0x580506e7 [0151.879] GetDIBits (in: hdc=0x8010579, hbm=0x580506e7, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0xb7e2d0, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb7e2d0) returned 1 [0151.879] GetDIBits (in: hdc=0x8010579, hbm=0x580506e7, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0xb7e2d0, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb7e2d0) returned 1 [0151.881] DeleteObject (ho=0x580506e7) returned 1 [0151.881] CreateDIBSection (in: hdc=0x8010579, lpbmi=0xb7e320, usage=0x0, ppvBits=0xb7e814, hSection=0x0, offset=0x0 | out: ppvBits=0xb7e814) returned 0x3c050586 [0151.881] SelectObject (hdc=0x3e0106d9, h=0x3c050586) returned 0x185000f [0151.881] GdipCreateFromHDC (hdc=0x3e0106d9, graphics=0xb7e7f8) returned 0x0 [0151.881] GdipTranslateWorldTransform (graphics=0x5018768, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0151.881] GdipSetClipRectI (graphics=0x5018768, x=0, y=0, width=711, height=36, combineMode=0x0) returned 0x0 [0151.881] GdipCreateMatrix (matrix=0xb7e8a0) returned 0x0 [0151.881] GdipGetWorldTransform (graphics=0x5018768, matrix=0x5018b78) returned 0x0 [0151.881] GdipIsMatrixIdentity (matrix=0x5018b78, result=0xb7e8b8) returned 0x0 [0151.881] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd67248 [0151.881] GdipGetMatrixElements (matrix=0x5018b78, matrixOut=0xd67248) returned 0x0 [0151.881] LocalFree (hMem=0xd67248) returned 0x0 [0151.881] GdipDeleteMatrix (matrix=0x5018b78) returned 0x0 [0151.881] GdipCreateRegion (region=0xb7e8a0) returned 0x0 [0151.881] GdipGetClip (graphics=0x5018768, region=0x50298b8) returned 0x0 [0151.881] GdipIsInfiniteRegion (region=0x50298b8, graphics=0x5018768, result=0xb7e8ac) returned 0x0 [0151.881] GdipSaveGraphics (graphics=0x5018768, state=0xb7e8d8) returned 0x0 [0151.881] GdipRestoreGraphics (graphics=0x5018768, state=0xfd8a0dbd) returned 0x0 [0151.881] GdipDeleteRegion (region=0x50298b8) returned 0x0 [0151.881] GdipGetDC (graphics=0x5018768, hdc=0xb7e628) returned 0x0 [0151.881] GetCurrentObject (hdc=0x3e0106d9, type=0x1) returned 0x1b00017 [0151.881] GetCurrentObject (hdc=0x3e0106d9, type=0x2) returned 0x1900010 [0151.881] GetCurrentObject (hdc=0x3e0106d9, type=0x7) returned 0x3c050586 [0151.881] GetCurrentObject (hdc=0x3e0106d9, type=0x6) returned 0x18a0048 [0151.881] SaveDC (hdc=0x3e0106d9) returned 1 [0151.881] GetNearestColor (hdc=0x3e0106d9, color=0xc0) returned 0xc0 [0151.881] GetNearestColor (hdc=0x3e0106d9, color=0x40) returned 0x40 [0151.882] GetNearestColor (hdc=0x3e0106d9, color=0x0) returned 0x0 [0151.882] GetNearestColor (hdc=0x3e0106d9, color=0x5656e5) returned 0x5656e5 [0151.882] GetNearestColor (hdc=0x3e0106d9, color=0x0) returned 0x0 [0151.882] GetNearestColor (hdc=0x3e0106d9, color=0x6060ff) returned 0x6060ff [0151.882] GetNearestColor (hdc=0x3e0106d9, color=0x5656e5) returned 0x5656e5 [0151.882] GetNearestColor (hdc=0x3e0106d9, color=0xe6) returned 0xe6 [0151.882] GetNearestColor (hdc=0x3e0106d9, color=0x0) returned 0x0 [0151.882] RestoreDC (hdc=0x3e0106d9, nSavedDC=-1) returned 1 [0151.882] GdipReleaseDC (graphics=0x5018768, hdc=0x3e0106d9) returned 0x0 [0151.882] DrawTextExW (in: hdc=0xd010694, lpchText="Decrypt", cchText=7, lprc=0xb7e4cc, format=0x102415, lpdtp=0x29943d8 | out: lpchText="Decrypt", lprc=0xb7e4cc) returned 13 [0151.882] GdipCreateRegion (region=0xb7e520) returned 0x0 [0151.882] GdipGetClip (graphics=0x5018768, region=0x50298b8) returned 0x0 [0151.882] GdipCreateMatrix (matrix=0xb7e520) returned 0x0 [0151.882] GdipGetWorldTransform (graphics=0x5018768, matrix=0x5018ba8) returned 0x0 [0151.882] GdipIsMatrixIdentity (matrix=0x5018ba8, result=0xb7e538) returned 0x0 [0151.882] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.882] GdipGetMatrixElements (matrix=0x5018ba8, matrixOut=0xd670f8) returned 0x0 [0151.882] LocalFree (hMem=0xd670f8) returned 0x0 [0151.882] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xd670f8 [0151.882] GdipGetMatrixElements (matrix=0x5018ba8, matrixOut=0xd670f8) returned 0x0 [0151.882] LocalFree (hMem=0xd670f8) returned 0x0 [0151.882] GdipDeleteMatrix (matrix=0x5018ba8) returned 0x0 [0151.882] GdipIsInfiniteRegion (region=0x50298b8, graphics=0x5018768, result=0xb7e564) returned 0x0 [0151.882] GdipIsInfiniteRegion (region=0x50298b8, graphics=0x5018768, result=0xb7e554) returned 0x0 [0151.882] GdipGetRegionHRgn (region=0x50298b8, graphics=0x5018768, hRgn=0xb7e554) returned 0x0 [0151.882] GdipDeleteRegion (region=0x50298b8) returned 0x0 [0151.882] GdipGetDC (graphics=0x5018768, hdc=0xb7e56c) returned 0x0 [0151.882] GetCurrentObject (hdc=0x3e0106d9, type=0x1) returned 0x1b00017 [0151.882] GetCurrentObject (hdc=0x3e0106d9, type=0x2) returned 0x1900010 [0151.882] GetCurrentObject (hdc=0x3e0106d9, type=0x7) returned 0x3c050586 [0151.882] GetCurrentObject (hdc=0x3e0106d9, type=0x6) returned 0x18a0048 [0151.882] SaveDC (hdc=0x3e0106d9) returned 1 [0151.882] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1d0405a4 [0151.882] GetClipRgn (hdc=0x3e0106d9, hrgn=0x1d0405a4) returned 0 [0151.882] SelectClipRgn (hdc=0x3e0106d9, hrgn=0x710406e8) returned 2 [0151.882] DeleteObject (ho=0x1d0405a4) returned 1 [0151.882] DeleteObject (ho=0x710406e8) returned 1 [0151.883] OffsetViewportOrgEx (in: hdc=0x3e0106d9, x=0, y=0, lppt=0x29945d0 | out: lppt=0x29945d0) returned 1 [0151.883] GetNearestColor (hdc=0x3e0106d9, color=0xc0) returned 0xc0 [0151.883] CreateSolidBrush (color=0xc0) returned 0x55100572 [0151.883] FillRect (hDC=0x3e0106d9, lprc=0xb7e570, hbr=0x55100572) returned 1 [0151.883] DeleteObject (ho=0x55100572) returned 1 [0151.883] RestoreDC (hdc=0x3e0106d9, nSavedDC=-1) returned 1 [0151.883] GdipReleaseDC (graphics=0x5018768, hdc=0x3e0106d9) returned 0x0 [0151.883] GdipGetTextRenderingHint (graphics=0x5018768, mode=0xb7e5ec) returned 0x0 [0151.883] GdipGetDC (graphics=0x5018768, hdc=0xb7e5d8) returned 0x0 [0151.883] GetCurrentObject (hdc=0x3e0106d9, type=0x1) returned 0x1b00017 [0151.883] GetCurrentObject (hdc=0x3e0106d9, type=0x2) returned 0x1900010 [0151.883] GetCurrentObject (hdc=0x3e0106d9, type=0x7) returned 0x3c050586 [0151.883] GetCurrentObject (hdc=0x3e0106d9, type=0x6) returned 0x18a0048 [0151.883] SaveDC (hdc=0x3e0106d9) returned 1 [0151.883] GetTextAlign (hdc=0x3e0106d9) returned 0x0 [0151.883] GetTextColor (hdc=0x3e0106d9) returned 0x0 [0151.883] GetCurrentObject (hdc=0x3e0106d9, type=0x6) returned 0x18a0048 [0151.883] GetObjectW (in: h=0x18a0048, c=92, pv=0xb7e338 | out: pv=0xb7e338) returned 92 [0151.883] SelectObject (hdc=0x3e0106d9, h=0x5a0a06d6) returned 0x18a0048 [0151.883] GetBkMode (hdc=0x3e0106d9) returned 2 [0151.883] SetBkMode (hdc=0x3e0106d9, mode=1) returned 2 [0151.883] DrawTextExW (in: hdc=0x3e0106d9, lpchText="Decrypt", cchText=7, lprc=0xb7e41c, format=0x102415, lpdtp=0x2994830 | out: lpchText="Decrypt", lprc=0xb7e41c) returned 13 [0151.884] DrawTextExW (in: hdc=0x3e0106d9, lpchText="Decrypt", cchText=7, lprc=0xb7e56c, format=0x102015, lpdtp=0x2994830 | out: lpchText="Decrypt", lprc=0xb7e56c) returned 13 [0151.884] RestoreDC (hdc=0x3e0106d9, nSavedDC=-1) returned 1 [0151.884] GdipReleaseDC (graphics=0x5018768, hdc=0x3e0106d9) returned 0x0 [0151.884] GetFocus () returned 0x101c4 [0151.884] GetFocus () returned 0x101c4 [0151.884] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0xb7e670) returned 0x0 [0151.884] GdipDrawRectangleI (graphics=0x5018768, pen=0x5013418, x=0, y=0, width=710, height=35) returned 0x0 [0151.884] GdipDeletePen (pen=0x5013418) returned 0x0 [0151.884] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0xb7e650) returned 0x0 [0151.884] GdipDrawRectangleI (graphics=0x5018768, pen=0x5013418, x=1, y=1, width=708, height=33) returned 0x0 [0151.884] GdipDeletePen (pen=0x5013418) returned 0x0 [0151.884] GdipGetDC (graphics=0x5018768, hdc=0xb7e898) returned 0x0 [0151.884] BitBlt (hdc=0x8010579, x=0, y=0, cx=711, cy=36, hdcSrc=0x3e0106d9, x1=0, y1=0, rop=0xcc0020) returned 1 [0151.884] GdipReleaseDC (graphics=0x5018768, hdc=0x3e0106d9) returned 0x0 [0151.884] SelectPalette (hdc=0x8010579, hPal=0x188000b, bForceBkgd=0) returned 0x30080588 [0151.884] SelectObject (hdc=0x3e0106d9, h=0x185000f) returned 0x3c050586 [0151.884] DeleteDC (hdc=0x3e0106d9) returned 1 [0151.884] GdipDeleteGraphics (graphics=0x5018768) returned 0x0 [0151.884] DeleteObject (ho=0x3c050586) returned 1 [0151.884] EndPaint (hWnd=0x101c4, lpPaint=0xb7e83c) returned 1 [0151.885] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.885] IsWindowUnicode (hWnd=0x101c6) returned 1 [0151.885] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.885] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.885] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.897] SendMessageW (hWnd=0x101c0, Msg=0x402, wParam=0x25, lParam=0x0) returned 0x64 [0151.897] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x402, wParam=0x25, lParam=0x0) returned 0x64 [0151.897] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0151.897] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x14, wParam=0x180106e6, lParam=0x0) returned 0x1 [0151.897] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0151.897] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0151.898] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0151.898] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0151.898] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0151.898] WaitMessage () returned 1 [0151.898] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0151.898] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0151.898] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0151.898] WaitMessage () returned 1 [0151.898] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0151.898] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0151.898] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0151.898] WaitMessage () returned 1 [0151.902] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.902] IsWindowUnicode (hWnd=0x101a0) returned 1 [0151.902] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.902] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.902] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.902] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xc0a9, wParam=0x0, lParam=0x0) returned 0x0 [0151.902] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0151.902] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0151.902] WaitMessage () returned 1 [0151.911] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.911] IsWindowUnicode (hWnd=0x101c6) returned 1 [0151.912] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0151.912] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0151.912] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0151.912] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0151.912] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0151.912] WaitMessage () returned 1 [0152.021] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.021] IsWindowUnicode (hWnd=0x101c6) returned 1 [0152.021] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.021] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0152.021] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0152.021] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.021] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.021] WaitMessage () returned 1 [0152.069] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.069] IsWindowUnicode (hWnd=0x101a2) returned 1 [0152.069] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.069] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0152.069] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0152.069] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.069] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.069] WaitMessage () returned 1 [0152.130] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.131] IsWindowUnicode (hWnd=0x101c6) returned 1 [0152.131] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.131] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0152.131] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0152.131] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.131] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.131] WaitMessage () returned 1 [0152.235] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.235] IsWindowUnicode (hWnd=0x101c6) returned 1 [0152.235] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.235] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0152.235] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0152.235] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.235] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.235] WaitMessage () returned 1 [0152.251] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.251] IsWindowUnicode (hWnd=0x101a0) returned 1 [0152.251] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.251] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0152.252] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0152.252] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.252] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.252] WaitMessage () returned 1 [0152.344] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.344] IsWindowUnicode (hWnd=0x101c6) returned 1 [0152.344] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.344] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0152.344] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0152.344] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.344] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.344] WaitMessage () returned 1 [0152.360] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.360] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0152.360] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0152.360] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0152.361] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.361] WaitMessage () returned 1 [0152.499] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.499] IsWindowUnicode (hWnd=0x101c6) returned 1 [0152.499] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.500] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0152.500] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0152.501] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.502] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.502] WaitMessage () returned 1 [0152.583] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.583] IsWindowUnicode (hWnd=0x101c6) returned 1 [0152.583] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.583] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0152.584] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0152.584] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.584] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.584] WaitMessage () returned 1 [0152.589] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.589] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.589] WaitMessage () returned 1 [0152.589] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.589] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0152.592] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.592] WaitMessage () returned 1 [0152.602] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.603] NtdllDefWindowProc_W (hWnd=0x1019c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0152.603] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.603] WaitMessage () returned 1 [0152.612] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.612] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.613] WaitMessage () returned 1 [0152.613] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.613] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0152.615] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.615] WaitMessage () returned 1 [0152.618] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.618] NtdllDefWindowProc_W (hWnd=0x1019c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0152.619] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.619] WaitMessage () returned 1 [0152.677] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.678] IsWindowUnicode (hWnd=0x101c6) returned 1 [0152.678] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.679] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0152.679] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0152.680] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.680] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.681] WaitMessage () returned 1 [0152.793] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.794] IsWindowUnicode (hWnd=0x101a0) returned 1 [0152.794] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.794] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0152.794] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0152.794] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.794] IsWindowUnicode (hWnd=0x101c6) returned 1 [0152.794] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.794] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0152.794] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0152.794] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.794] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.794] WaitMessage () returned 1 [0152.905] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.905] IsWindowUnicode (hWnd=0x101c6) returned 1 [0152.905] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0152.905] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0152.905] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0152.905] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.905] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0152.905] WaitMessage () returned 1 [0153.009] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.009] IsWindowUnicode (hWnd=0x101c6) returned 1 [0153.009] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.009] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0153.009] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0153.010] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.010] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.010] WaitMessage () returned 1 [0153.117] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.119] IsWindowUnicode (hWnd=0x101c6) returned 1 [0153.120] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.121] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0153.121] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0153.122] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.122] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.124] WaitMessage () returned 1 [0153.274] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.274] IsWindowUnicode (hWnd=0x101c6) returned 1 [0153.274] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.274] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0153.274] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0153.274] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.274] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.274] WaitMessage () returned 1 [0153.338] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.338] IsWindowUnicode (hWnd=0x101a0) returned 1 [0153.338] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.338] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0153.338] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0153.339] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.339] IsWindowUnicode (hWnd=0x101c6) returned 1 [0153.339] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.339] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0153.339] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0153.339] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.339] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.339] WaitMessage () returned 1 [0153.440] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.440] IsWindowUnicode (hWnd=0x101c6) returned 1 [0153.440] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.440] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0153.440] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0153.440] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.441] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.441] WaitMessage () returned 1 [0153.551] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.551] IsWindowUnicode (hWnd=0x101c6) returned 1 [0153.551] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.551] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0153.551] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0153.551] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.551] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.551] WaitMessage () returned 1 [0153.660] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.660] IsWindowUnicode (hWnd=0x101c6) returned 1 [0153.660] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.660] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0153.660] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0153.660] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.660] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.660] WaitMessage () returned 1 [0153.771] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.771] IsWindowUnicode (hWnd=0x101c6) returned 1 [0153.771] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.771] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0153.771] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0153.771] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.771] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.771] WaitMessage () returned 1 [0153.844] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.844] IsWindowUnicode (hWnd=0x101a0) returned 1 [0153.844] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.844] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0153.844] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0153.845] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.845] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.845] WaitMessage () returned 1 [0153.877] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.877] IsWindowUnicode (hWnd=0x101c6) returned 1 [0153.877] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.877] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0153.877] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0153.877] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.877] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.877] WaitMessage () returned 1 [0153.987] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.987] IsWindowUnicode (hWnd=0x101c6) returned 1 [0153.987] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0153.987] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0153.987] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0153.987] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.987] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0153.987] WaitMessage () returned 1 [0154.097] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.097] IsWindowUnicode (hWnd=0x101c6) returned 1 [0154.097] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.097] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0154.097] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0154.097] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.097] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.097] WaitMessage () returned 1 [0154.210] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.210] IsWindowUnicode (hWnd=0x101c6) returned 1 [0154.210] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.210] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0154.210] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0154.210] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.210] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.210] WaitMessage () returned 1 [0154.321] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.321] IsWindowUnicode (hWnd=0x101c6) returned 1 [0154.321] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.321] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0154.321] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0154.321] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.321] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.321] WaitMessage () returned 1 [0154.383] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.384] IsWindowUnicode (hWnd=0x101a0) returned 1 [0154.384] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.384] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0154.384] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0154.384] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.384] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.384] WaitMessage () returned 1 [0154.429] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.429] IsWindowUnicode (hWnd=0x101c6) returned 1 [0154.429] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.429] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0154.429] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0154.429] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.429] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.429] WaitMessage () returned 1 [0154.538] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.539] IsWindowUnicode (hWnd=0x101c6) returned 1 [0154.539] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.539] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0154.539] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0154.539] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.539] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.539] WaitMessage () returned 1 [0154.646] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.646] IsWindowUnicode (hWnd=0x101c6) returned 1 [0154.646] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.646] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0154.646] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0154.646] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.646] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.646] WaitMessage () returned 1 [0154.753] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.753] IsWindowUnicode (hWnd=0x101c6) returned 1 [0154.753] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.753] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0154.753] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0154.753] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.753] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.753] WaitMessage () returned 1 [0154.864] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.864] IsWindowUnicode (hWnd=0x101c6) returned 1 [0154.864] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.864] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0154.864] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0154.864] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.864] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.864] WaitMessage () returned 1 [0154.916] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.916] IsWindowUnicode (hWnd=0x101a0) returned 1 [0154.916] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.916] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0154.916] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0154.928] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.928] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.928] WaitMessage () returned 1 [0154.979] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.979] IsWindowUnicode (hWnd=0x101c6) returned 1 [0154.979] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0154.979] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0154.979] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0154.979] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.979] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0154.979] WaitMessage () returned 1 [0155.092] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.092] IsWindowUnicode (hWnd=0x101c6) returned 1 [0155.092] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.092] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0155.092] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0155.092] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.092] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.092] WaitMessage () returned 1 [0155.208] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.208] IsWindowUnicode (hWnd=0x101c6) returned 1 [0155.208] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.208] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0155.208] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0155.209] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.209] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.209] WaitMessage () returned 1 [0155.307] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.307] IsWindowUnicode (hWnd=0x101c6) returned 1 [0155.307] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.307] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0155.307] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0155.307] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.307] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.307] WaitMessage () returned 1 [0155.413] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.446] IsWindowUnicode (hWnd=0x101c6) returned 1 [0155.446] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.461] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0155.461] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0155.461] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.462] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0155.468] IsWindowUnicode (hWnd=0x101a0) returned 1 [0155.468] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.472] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0155.472] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0155.473] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.473] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.473] WaitMessage () returned 1 [0155.559] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.559] IsWindowUnicode (hWnd=0x101c6) returned 1 [0155.559] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.559] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0155.559] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0155.559] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.559] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.559] WaitMessage () returned 1 [0155.634] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.634] IsWindowUnicode (hWnd=0x101c6) returned 1 [0155.634] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.634] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0155.634] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0155.634] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.634] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.634] WaitMessage () returned 1 [0155.736] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.736] IsWindowUnicode (hWnd=0x101c6) returned 1 [0155.736] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.736] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0155.736] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0155.736] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.736] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.736] WaitMessage () returned 1 [0155.853] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.853] IsWindowUnicode (hWnd=0x101c6) returned 1 [0155.853] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.853] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0155.853] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0155.853] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.853] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.853] WaitMessage () returned 1 [0155.863] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.863] NtdllDefWindowProc_W (hWnd=0x1019c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0155.864] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.864] WaitMessage () returned 1 [0155.957] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.957] IsWindowUnicode (hWnd=0x101c6) returned 1 [0155.957] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.957] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0155.957] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0155.957] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.957] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.957] WaitMessage () returned 1 [0155.981] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.981] IsWindowUnicode (hWnd=0x101a0) returned 1 [0155.981] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0155.981] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0155.981] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0155.991] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.992] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0155.992] WaitMessage () returned 1 [0156.097] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.136] IsWindowUnicode (hWnd=0x101c6) returned 1 [0156.136] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.136] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0156.136] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0156.136] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.136] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.136] WaitMessage () returned 1 [0156.178] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.178] IsWindowUnicode (hWnd=0x101c6) returned 1 [0156.178] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.178] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0156.178] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0156.178] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.178] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.178] WaitMessage () returned 1 [0156.315] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.315] IsWindowUnicode (hWnd=0x101c6) returned 1 [0156.315] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.315] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0156.315] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0156.315] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.315] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.315] WaitMessage () returned 1 [0156.393] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.393] IsWindowUnicode (hWnd=0x101c6) returned 1 [0156.393] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.393] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0156.393] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0156.393] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.393] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.393] WaitMessage () returned 1 [0156.501] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.501] IsWindowUnicode (hWnd=0x101a0) returned 1 [0156.501] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.501] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0156.501] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0156.501] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.501] IsWindowUnicode (hWnd=0x101c6) returned 1 [0156.501] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.501] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0156.501] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0156.502] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.502] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.502] WaitMessage () returned 1 [0156.611] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.611] IsWindowUnicode (hWnd=0x101c6) returned 1 [0156.611] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.611] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0156.611] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0156.611] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.611] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.611] WaitMessage () returned 1 [0156.720] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.720] IsWindowUnicode (hWnd=0x101c6) returned 1 [0156.721] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.721] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0156.721] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0156.721] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.721] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.721] WaitMessage () returned 1 [0156.830] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.830] IsWindowUnicode (hWnd=0x101c6) returned 1 [0156.830] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.830] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0156.830] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0156.830] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.830] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.830] WaitMessage () returned 1 [0156.941] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.941] IsWindowUnicode (hWnd=0x101c6) returned 1 [0156.941] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0156.941] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0156.941] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0156.941] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.941] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0156.941] WaitMessage () returned 1 [0157.032] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.032] IsWindowUnicode (hWnd=0x101a0) returned 1 [0157.032] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.032] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0157.032] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0157.035] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.035] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.035] WaitMessage () returned 1 [0157.052] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.052] IsWindowUnicode (hWnd=0x101c6) returned 1 [0157.052] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.052] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0157.052] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0157.052] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.052] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.052] WaitMessage () returned 1 [0157.168] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.168] IsWindowUnicode (hWnd=0x101c6) returned 1 [0157.168] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.168] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0157.168] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0157.168] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.168] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.168] WaitMessage () returned 1 [0157.305] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.305] IsWindowUnicode (hWnd=0x101c6) returned 1 [0157.305] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.305] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0157.305] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0157.305] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.305] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.305] WaitMessage () returned 1 [0157.444] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.444] IsWindowUnicode (hWnd=0x101c6) returned 1 [0157.444] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.444] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0157.444] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0157.444] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.444] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.444] WaitMessage () returned 1 [0157.553] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.553] IsWindowUnicode (hWnd=0x101c6) returned 1 [0157.553] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.553] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0157.553] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0157.553] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.553] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.553] WaitMessage () returned 1 [0157.569] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.569] IsWindowUnicode (hWnd=0x101a0) returned 1 [0157.569] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.569] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0157.569] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0157.572] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.572] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.572] WaitMessage () returned 1 [0157.698] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.698] IsWindowUnicode (hWnd=0x101c6) returned 1 [0157.698] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.698] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0157.698] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0157.698] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.698] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.698] WaitMessage () returned 1 [0157.705] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.705] IsWindowUnicode (hWnd=0x101c6) returned 1 [0157.705] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.705] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0157.705] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0157.706] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.706] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.706] WaitMessage () returned 1 [0157.842] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.842] IsWindowUnicode (hWnd=0x101c6) returned 1 [0157.842] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.842] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0157.842] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0157.842] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.842] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.842] WaitMessage () returned 1 [0157.982] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.982] IsWindowUnicode (hWnd=0x101c6) returned 1 [0157.982] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0157.982] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0157.982] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0157.982] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.982] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0157.982] WaitMessage () returned 1 [0158.121] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.121] IsWindowUnicode (hWnd=0x101c6) returned 1 [0158.121] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.121] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0158.121] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0158.121] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.121] IsWindowUnicode (hWnd=0x101a0) returned 1 [0158.121] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.121] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0158.121] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0158.124] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.124] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.124] WaitMessage () returned 1 [0158.138] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.138] IsWindowUnicode (hWnd=0x101c6) returned 1 [0158.138] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.138] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0158.138] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0158.138] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.138] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.138] WaitMessage () returned 1 [0158.263] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.263] IsWindowUnicode (hWnd=0x101c6) returned 1 [0158.263] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.263] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0158.263] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0158.263] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.263] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.263] WaitMessage () returned 1 [0158.405] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.405] IsWindowUnicode (hWnd=0x101c6) returned 1 [0158.405] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.405] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0158.405] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0158.405] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.405] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.405] WaitMessage () returned 1 [0158.584] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.584] IsWindowUnicode (hWnd=0x101c6) returned 1 [0158.584] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.584] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0158.585] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0158.585] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.585] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.585] WaitMessage () returned 1 [0158.623] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.623] IsWindowUnicode (hWnd=0x101a0) returned 1 [0158.623] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.623] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0158.623] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0158.650] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.650] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.651] WaitMessage () returned 1 [0158.684] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.684] IsWindowUnicode (hWnd=0x101c6) returned 1 [0158.684] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.684] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0158.684] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0158.684] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.685] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.685] WaitMessage () returned 1 [0158.987] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.987] IsWindowUnicode (hWnd=0x101c6) returned 1 [0158.987] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0158.987] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0158.987] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0158.987] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.987] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0158.987] WaitMessage () returned 1 [0159.012] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.012] IsWindowUnicode (hWnd=0x101c6) returned 1 [0159.012] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.012] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.012] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.012] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.012] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.012] WaitMessage () returned 1 [0159.149] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.149] IsWindowUnicode (hWnd=0x101c6) returned 1 [0159.149] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.149] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.149] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.149] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.149] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.149] WaitMessage () returned 1 [0159.166] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.166] IsWindowUnicode (hWnd=0x101a0) returned 1 [0159.166] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.166] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.166] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.166] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0159.166] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0159.166] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0159.166] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0159.167] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.167] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.167] WaitMessage () returned 1 [0159.167] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.177] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.177] WaitMessage () returned 1 [0159.177] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.178] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0159.180] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.180] WaitMessage () returned 1 [0159.227] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.227] NtdllDefWindowProc_W (hWnd=0x1019c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0159.227] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.227] WaitMessage () returned 1 [0159.239] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.240] IsWindowUnicode (hWnd=0x101c6) returned 1 [0159.240] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.240] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.240] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.240] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.240] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.240] WaitMessage () returned 1 [0159.340] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.340] IsWindowUnicode (hWnd=0x101c6) returned 1 [0159.340] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.340] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.340] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.340] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.340] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.340] WaitMessage () returned 1 [0159.455] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.455] IsWindowUnicode (hWnd=0x101c6) returned 1 [0159.455] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.455] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.455] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.455] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.455] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.455] WaitMessage () returned 1 [0159.477] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.477] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a0, lParam=0x2000000) returned 0x0 [0159.477] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.477] WaitMessage () returned 1 [0159.507] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.507] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x84, wParam=0x0, lParam=0x1830225) returned 0x12 [0159.507] IsWindowUnicode (hWnd=0x101a8) returned 1 [0159.507] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.507] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x84, wParam=0x0, lParam=0x1830225) returned 0x12 [0159.507] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x20, wParam=0x101a8, lParam=0x2000012) returned 0x0 [0159.507] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x20, wParam=0x101a8, lParam=0x2000012) returned 0x0 [0159.507] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a8, lParam=0x2000012) returned 0x0 [0159.507] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.507] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.507] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0xa0, wParam=0x12, lParam=0x1830225) returned 0x0 [0159.507] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.507] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.507] WaitMessage () returned 1 [0159.535] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.535] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x84, wParam=0x0, lParam=0x16e01e8) returned 0x1 [0159.535] IsWindowUnicode (hWnd=0x101a4) returned 1 [0159.535] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.536] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x84, wParam=0x0, lParam=0x16e01e8) returned 0x1 [0159.536] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0159.536] SetCursor (hCursor=0x10003) returned 0x10003 [0159.537] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.537] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.537] _TrackMouseEvent (in: lpEventTrack=0x299ad20 | out: lpEventTrack=0x299ad20) returned 1 [0159.537] SendMessageW (hWnd=0x101a4, Msg=0xc131, wParam=0x0, lParam=0x0) returned 0x0 [0159.537] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0xc131, wParam=0x0, lParam=0x0) returned 0x0 [0159.538] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x200, wParam=0x0, lParam=0x1d01bd) returned 0x0 [0159.538] GetKeyState (nVirtKey=2) returned 0 [0159.538] GetKeyState (nVirtKey=4) returned 0 [0159.538] GetKeyState (nVirtKey=5) returned 0 [0159.538] GetKeyState (nVirtKey=6) returned 0 [0159.538] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.538] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.538] WaitMessage () returned 1 [0159.561] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.561] IsWindowUnicode (hWnd=0x101c6) returned 1 [0159.561] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.561] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.561] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.561] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.561] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.561] WaitMessage () returned 1 [0159.568] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.568] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x84, wParam=0x0, lParam=0x16501e8) returned 0x1 [0159.568] IsWindowUnicode (hWnd=0x101a4) returned 1 [0159.568] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.568] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x84, wParam=0x0, lParam=0x16501e8) returned 0x1 [0159.568] SetCursor (hCursor=0x10003) returned 0x10003 [0159.569] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.569] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.569] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x200, wParam=0x0, lParam=0x1401bd) returned 0x0 [0159.569] GetKeyState (nVirtKey=1) returned 1 [0159.569] GetKeyState (nVirtKey=2) returned 0 [0159.569] GetKeyState (nVirtKey=4) returned 0 [0159.569] GetKeyState (nVirtKey=5) returned 0 [0159.569] GetKeyState (nVirtKey=6) returned 0 [0159.569] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.569] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.569] WaitMessage () returned 1 [0159.605] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.607] MapWindowPoints (in: hWndFrom=0x101b0, hWndTo=0x0, lpPoints=0xb7e9d0, cPoints=0x2 | out: lpPoints=0xb7e9d0) returned 12386720 [0159.607] IsWindowUnicode (hWnd=0x101b0) returned 1 [0159.607] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.608] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.608] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.608] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0159.608] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.608] MapWindowPoints (in: hWndFrom=0x101b0, hWndTo=0x0, lpPoints=0xb7e9d0, cPoints=0x2 | out: lpPoints=0xb7e9d0) returned 12386720 [0159.608] IsWindowUnicode (hWnd=0x101b0) returned 1 [0159.608] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.608] MapWindowPoints (in: hWndFrom=0x101b0, hWndTo=0x0, lpPoints=0xb7ea1c, cPoints=0x2 | out: lpPoints=0xb7ea1c) returned 12386720 [0159.608] SetCursor (hCursor=0x10003) returned 0x10003 [0159.608] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.609] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.609] _TrackMouseEvent (in: lpEventTrack=0x299af3c | out: lpEventTrack=0x299af3c) returned 1 [0159.609] SendMessageW (hWnd=0x101b0, Msg=0xc131, wParam=0x0, lParam=0x0) returned 0x0 [0159.609] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0xc131, wParam=0x0, lParam=0x0) returned 0x0 [0159.609] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x200, wParam=0x0, lParam=0x410034) returned 0x0 [0159.609] GetKeyState (nVirtKey=1) returned 1 [0159.609] GetKeyState (nVirtKey=2) returned 0 [0159.609] GetKeyState (nVirtKey=4) returned 0 [0159.609] GetKeyState (nVirtKey=5) returned 0 [0159.609] GetKeyState (nVirtKey=6) returned 0 [0159.609] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.609] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.609] WaitMessage () returned 1 [0159.628] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.628] MapWindowPoints (in: hWndFrom=0x101b0, hWndTo=0x0, lpPoints=0xb7e9d0, cPoints=0x2 | out: lpPoints=0xb7e9d0) returned 12386720 [0159.628] IsWindowUnicode (hWnd=0x101b0) returned 1 [0159.628] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.628] MapWindowPoints (in: hWndFrom=0x101b0, hWndTo=0x0, lpPoints=0xb7ea1c, cPoints=0x2 | out: lpPoints=0xb7ea1c) returned 12386720 [0159.629] SetCursor (hCursor=0x10003) returned 0x10003 [0159.629] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.629] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.629] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x200, wParam=0x0, lParam=0x7001e) returned 0x0 [0159.629] GetKeyState (nVirtKey=1) returned 1 [0159.629] GetKeyState (nVirtKey=2) returned 0 [0159.629] GetKeyState (nVirtKey=4) returned 0 [0159.629] GetKeyState (nVirtKey=5) returned 0 [0159.629] GetKeyState (nVirtKey=6) returned 0 [0159.629] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.629] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.629] WaitMessage () returned 1 [0159.658] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.658] MapWindowPoints (in: hWndFrom=0x101be, hWndTo=0x0, lpPoints=0xb7e9d0, cPoints=0x2 | out: lpPoints=0xb7e9d0) returned 8782240 [0159.658] IsWindowUnicode (hWnd=0x101be) returned 1 [0159.658] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.658] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.658] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.658] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0159.658] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.658] MapWindowPoints (in: hWndFrom=0x101be, hWndTo=0x0, lpPoints=0xb7e9d0, cPoints=0x2 | out: lpPoints=0xb7e9d0) returned 8782240 [0159.659] IsWindowUnicode (hWnd=0x101be) returned 1 [0159.659] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.659] MapWindowPoints (in: hWndFrom=0x101be, hWndTo=0x0, lpPoints=0xb7ea1c, cPoints=0x2 | out: lpPoints=0xb7ea1c) returned 8782240 [0159.659] SetCursor (hCursor=0x10003) returned 0x10003 [0159.659] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.659] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.659] _TrackMouseEvent (in: lpEventTrack=0x299afd4 | out: lpEventTrack=0x299afd4) returned 1 [0159.659] SendMessageW (hWnd=0x101be, Msg=0xc131, wParam=0x0, lParam=0x0) returned 0x0 [0159.659] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0xc131, wParam=0x0, lParam=0x0) returned 0x0 [0159.660] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x200, wParam=0x0, lParam=0x90014) returned 0x0 [0159.660] GetKeyState (nVirtKey=1) returned 1 [0159.660] GetKeyState (nVirtKey=2) returned 0 [0159.660] GetKeyState (nVirtKey=4) returned 0 [0159.660] GetKeyState (nVirtKey=5) returned 0 [0159.660] GetKeyState (nVirtKey=6) returned 0 [0159.660] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.660] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.660] WaitMessage () returned 1 [0159.670] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.670] IsWindowUnicode (hWnd=0x101c6) returned 1 [0159.670] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.670] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.670] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.670] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.670] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.670] WaitMessage () returned 1 [0159.688] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.688] MapWindowPoints (in: hWndFrom=0x101be, hWndTo=0x0, lpPoints=0xb7e9d0, cPoints=0x2 | out: lpPoints=0xb7e9d0) returned 8782240 [0159.689] IsWindowUnicode (hWnd=0x101be) returned 1 [0159.689] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.689] MapWindowPoints (in: hWndFrom=0x101be, hWndTo=0x0, lpPoints=0xb7ea1c, cPoints=0x2 | out: lpPoints=0xb7ea1c) returned 8782240 [0159.689] SetCursor (hCursor=0x10003) returned 0x10003 [0159.689] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.689] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.689] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x200, wParam=0x0, lParam=0x40019) returned 0x0 [0159.689] GetKeyState (nVirtKey=1) returned 1 [0159.689] GetKeyState (nVirtKey=2) returned 0 [0159.689] GetKeyState (nVirtKey=4) returned 0 [0159.689] GetKeyState (nVirtKey=5) returned 0 [0159.689] GetKeyState (nVirtKey=6) returned 0 [0159.689] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.690] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.690] WaitMessage () returned 1 [0159.718] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.718] MapWindowPoints (in: hWndFrom=0x101be, hWndTo=0x0, lpPoints=0xb7e9d0, cPoints=0x2 | out: lpPoints=0xb7e9d0) returned 8782240 [0159.718] IsWindowUnicode (hWnd=0x101be) returned 1 [0159.718] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.719] MapWindowPoints (in: hWndFrom=0x101be, hWndTo=0x0, lpPoints=0xb7ea1c, cPoints=0x2 | out: lpPoints=0xb7ea1c) returned 8782240 [0159.719] SetCursor (hCursor=0x10003) returned 0x10003 [0159.719] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.719] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.719] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x200, wParam=0x0, lParam=0x4001b) returned 0x0 [0159.719] GetKeyState (nVirtKey=1) returned 1 [0159.719] GetKeyState (nVirtKey=2) returned 0 [0159.719] GetKeyState (nVirtKey=4) returned 0 [0159.719] GetKeyState (nVirtKey=5) returned 0 [0159.719] GetKeyState (nVirtKey=6) returned 0 [0159.719] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.719] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.719] WaitMessage () returned 1 [0159.750] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.750] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x84, wParam=0x0, lParam=0xac01fd) returned 0x1 [0159.750] IsWindowUnicode (hWnd=0x101aa) returned 1 [0159.750] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.750] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.750] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.750] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0159.750] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.750] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x84, wParam=0x0, lParam=0xac01fd) returned 0x1 [0159.750] IsWindowUnicode (hWnd=0x101aa) returned 1 [0159.751] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.751] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x84, wParam=0x0, lParam=0xac01fd) returned 0x1 [0159.751] SetCursor (hCursor=0x10003) returned 0x10003 [0159.751] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.751] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.751] _TrackMouseEvent (in: lpEventTrack=0x299b214 | out: lpEventTrack=0x299b214) returned 1 [0159.751] SendMessageW (hWnd=0x101aa, Msg=0xc131, wParam=0x0, lParam=0x0) returned 0x0 [0159.751] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0xc131, wParam=0x0, lParam=0x0) returned 0x0 [0159.751] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x200, wParam=0x0, lParam=0x10061) returned 0x0 [0159.751] GetKeyState (nVirtKey=1) returned 1 [0159.752] GetKeyState (nVirtKey=2) returned 0 [0159.752] GetKeyState (nVirtKey=4) returned 0 [0159.752] GetKeyState (nVirtKey=5) returned 0 [0159.752] GetKeyState (nVirtKey=6) returned 0 [0159.752] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.752] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.752] WaitMessage () returned 1 [0159.781] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.782] MapWindowPoints (in: hWndFrom=0x101ae, hWndTo=0x0, lpPoints=0xb7e9c8, cPoints=0x2 | out: lpPoints=0xb7e9c8) returned 14090663 [0159.782] IsWindowUnicode (hWnd=0x101ae) returned 1 [0159.782] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.782] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.782] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.782] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0159.782] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.782] MapWindowPoints (in: hWndFrom=0x101ae, hWndTo=0x0, lpPoints=0xb7e9c8, cPoints=0x2 | out: lpPoints=0xb7e9c8) returned 14090663 [0159.782] IsWindowUnicode (hWnd=0x101ae) returned 1 [0159.782] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.783] MapWindowPoints (in: hWndFrom=0x101ae, hWndTo=0x0, lpPoints=0xb7ea14, cPoints=0x2 | out: lpPoints=0xb7ea14) returned 14090663 [0159.783] SetCursor (hCursor=0x10003) returned 0x10003 [0159.783] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.783] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.783] _TrackMouseEvent (in: lpEventTrack=0x299b26c | out: lpEventTrack=0x299b26c) returned 1 [0159.783] SendMessageW (hWnd=0x101ae, Msg=0xc131, wParam=0x0, lParam=0x0) returned 0x0 [0159.783] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0xc131, wParam=0x0, lParam=0x0) returned 0x0 [0159.783] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x200, wParam=0x0, lParam=0x800b1) returned 0x0 [0159.783] GetKeyState (nVirtKey=1) returned 1 [0159.783] GetKeyState (nVirtKey=2) returned 0 [0159.784] GetKeyState (nVirtKey=4) returned 0 [0159.784] GetKeyState (nVirtKey=5) returned 0 [0159.784] GetKeyState (nVirtKey=6) returned 0 [0159.786] GdipCreateFromHWND (hwnd=0x101ae, graphics=0xb7e9f0) returned 0x0 [0159.790] GdipIsVisibleRegionPointI (region=0x5018c28, x=177, y=8, graphics=0x5018768, result=0xb7e9d4) returned 0x0 [0159.790] GdipDeleteGraphics (graphics=0x5018768) returned 0x0 [0159.816] OleCreatePictureIndirect () returned 0x0 [0159.819] CPicture::QueryInterface () returned 0x0 [0159.820] CPicture::QueryInterface () returned 0x80004002 [0159.820] CPicture::QueryInterface () returned 0x80004002 [0159.820] CPicture::QueryInterface () returned 0x80004002 [0159.820] CPicture::AddRef () returned 0x3 [0159.820] CPicture::QueryInterface () returned 0x80004002 [0159.820] CPicture::QueryInterface () returned 0x80004002 [0159.820] CPicture::QueryInterface () returned 0x0 [0159.820] CPicture::GetUnmarshalClass () returned 0x80004005 [0159.821] Release () returned 0x3 [0159.821] CoGetContextToken (in: pToken=0xb7dd38 | out: pToken=0xb7dd38) returned 0x0 [0159.821] CObjectContext::QueryInterface () returned 0x0 [0159.822] CObjectContext::GetCurrentApartmentType () returned 0x0 [0159.822] Release () returned 0x0 [0159.822] CoGetObjectContext (in: riid=0x746f2990*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0xdaa914 | out: ppv=0xdaa914*=0xd67550) returned 0x0 [0159.896] CoGetContextToken (in: pToken=0xb7e140 | out: pToken=0xb7e140) returned 0x0 [0159.896] CPicture::QueryInterface () returned 0x80004002 [0159.896] CPicture::Release () returned 0x2 [0159.896] CoGetContextToken (in: pToken=0xb7e720 | out: pToken=0xb7e720) returned 0x0 [0159.896] CoGetContextToken (in: pToken=0xb7e680 | out: pToken=0xb7e680) returned 0x0 [0159.896] CPicture::QueryInterface () returned 0x0 [0159.897] CPicture::AddRef () returned 0x4 [0159.897] CPicture::Release () returned 0x3 [0159.897] CPicture::Release () returned 0x2 [0159.897] CoGetContextToken (in: pToken=0xb7e7d0 | out: pToken=0xb7e7d0) returned 0x0 [0159.897] CoGetContextToken (in: pToken=0xb7e730 | out: pToken=0xb7e730) returned 0x0 [0159.897] CPicture::QueryInterface () returned 0x0 [0159.897] AddRef () returned 0x4 [0159.897] Release () returned 0x3 [0159.901] CPicture::Load () returned 0x0 [0159.912] CPicture::get_Type () returned 0x0 [0159.912] CPicture::get_Handle () returned 0x0 [0159.912] GetSystemMetrics (nIndex=13) returned 32 [0159.912] GetSystemMetrics (nIndex=14) returned 32 [0159.913] GetIconInfo (in: hIcon=0x110173, piconinfo=0x299b8d8 | out: piconinfo=0x299b8d8) returned 1 [0159.913] GetObjectW (in: h=0x140501bd, c=24, pv=0x299b8f4 | out: pv=0x299b8f4) returned 24 [0159.913] DeleteObject (ho=0x140501bd) returned 1 [0159.913] CopyImage (h=0x110173, type=0x2, cx=32, cy=32, flags=0x0) returned 0x60195 [0159.914] CoGetContextToken (in: pToken=0xb7e850 | out: pToken=0xb7e850) returned 0x0 [0159.914] CPicture::Release () returned 0x2 [0159.914] CPicture::Release () returned 0x1 [0159.914] Release () returned 0x0 [0159.914] IUnknown:Release (This=0xd67550) returned 0x0 [0159.914] GetCursorPos (in: lpPoint=0x299b930 | out: lpPoint=0x299b930*(x=1362, y=468)) returned 1 [0159.914] GetWindowRect (in: hWnd=0x101ae, lpRect=0xb7ea14 | out: lpRect=0xb7ea14) returned 1 [0159.914] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.914] IsWindowUnicode (hWnd=0x101ae) returned 1 [0159.914] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.914] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.914] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.914] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0159.914] GetCursorPos (in: lpPoint=0x299b95c | out: lpPoint=0x299b95c*(x=1362, y=468)) returned 1 [0159.914] GetWindowRect (in: hWnd=0x101ae, lpRect=0xb7ea2c | out: lpRect=0xb7ea2c) returned 1 [0159.914] GetCapture () returned 0x0 [0159.914] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.914] IsWindowUnicode (hWnd=0x101c6) returned 1 [0159.914] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.914] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.914] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.914] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.914] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.914] WaitMessage () returned 1 [0159.996] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.996] IsWindowUnicode (hWnd=0x101c6) returned 1 [0159.996] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0159.996] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0159.996] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0159.996] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.996] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0159.997] WaitMessage () returned 1 [0160.106] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.106] IsWindowUnicode (hWnd=0x101c6) returned 1 [0160.106] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.106] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0160.106] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0160.106] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.106] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.106] WaitMessage () returned 1 [0160.227] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.227] IsWindowUnicode (hWnd=0x101c6) returned 1 [0160.227] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.227] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0160.228] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0160.228] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.228] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.228] WaitMessage () returned 1 [0160.335] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.336] IsWindowUnicode (hWnd=0x101c6) returned 1 [0160.336] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.336] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0160.336] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0160.336] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.336] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.336] WaitMessage () returned 1 [0160.445] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.445] IsWindowUnicode (hWnd=0x101c6) returned 1 [0160.445] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.445] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0160.445] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0160.446] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.446] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.446] WaitMessage () returned 1 [0160.555] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.555] IsWindowUnicode (hWnd=0x101c6) returned 1 [0160.555] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.555] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0160.555] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0160.555] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.555] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.555] WaitMessage () returned 1 [0160.664] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.664] IsWindowUnicode (hWnd=0x101c6) returned 1 [0160.664] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.664] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0160.664] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0160.664] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.664] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.664] WaitMessage () returned 1 [0160.773] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.773] IsWindowUnicode (hWnd=0x101c6) returned 1 [0160.773] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.774] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0160.774] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0160.774] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.774] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.774] WaitMessage () returned 1 [0160.881] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.881] IsWindowUnicode (hWnd=0x101c6) returned 1 [0160.881] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.881] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0160.881] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0160.882] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.882] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.882] WaitMessage () returned 1 [0160.991] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.991] IsWindowUnicode (hWnd=0x101c6) returned 1 [0160.991] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0160.991] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0160.991] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0160.991] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.991] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0160.991] WaitMessage () returned 1 [0161.102] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.102] IsWindowUnicode (hWnd=0x101c6) returned 1 [0161.102] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.102] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0161.102] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0161.102] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.102] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.102] WaitMessage () returned 1 [0161.209] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.209] IsWindowUnicode (hWnd=0x101c6) returned 1 [0161.209] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.209] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0161.209] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0161.209] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.209] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.209] WaitMessage () returned 1 [0161.319] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.319] IsWindowUnicode (hWnd=0x101c6) returned 1 [0161.319] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.319] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0161.319] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0161.319] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.319] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.319] WaitMessage () returned 1 [0161.428] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.428] IsWindowUnicode (hWnd=0x101c6) returned 1 [0161.428] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.428] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0161.428] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0161.429] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.429] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.429] WaitMessage () returned 1 [0161.539] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.539] IsWindowUnicode (hWnd=0x101c6) returned 1 [0161.539] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.539] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0161.539] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0161.539] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.539] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.539] WaitMessage () returned 1 [0161.649] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.649] IsWindowUnicode (hWnd=0x101c6) returned 1 [0161.649] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.649] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0161.649] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0161.650] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.650] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.650] WaitMessage () returned 1 [0161.758] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.758] IsWindowUnicode (hWnd=0x101c6) returned 1 [0161.758] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.758] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0161.758] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0161.759] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.759] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.759] WaitMessage () returned 1 [0161.867] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.868] IsWindowUnicode (hWnd=0x101c6) returned 1 [0161.868] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.868] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0161.868] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0161.868] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.868] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.868] WaitMessage () returned 1 [0161.977] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.977] IsWindowUnicode (hWnd=0x101c6) returned 1 [0161.977] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0161.977] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0161.977] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0161.978] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.978] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0161.978] WaitMessage () returned 1 [0162.086] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.087] IsWindowUnicode (hWnd=0x101c6) returned 1 [0162.087] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.087] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0162.087] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0162.087] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.087] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.087] WaitMessage () returned 1 [0162.196] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.196] IsWindowUnicode (hWnd=0x101c6) returned 1 [0162.196] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.196] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0162.196] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0162.197] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.197] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.197] WaitMessage () returned 1 [0162.312] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.312] IsWindowUnicode (hWnd=0x101c6) returned 1 [0162.312] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.312] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0162.312] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0162.312] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.312] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.312] WaitMessage () returned 1 [0162.418] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.418] IsWindowUnicode (hWnd=0x101c6) returned 1 [0162.418] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.418] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0162.418] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0162.418] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.419] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.419] WaitMessage () returned 1 [0162.523] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.523] IsWindowUnicode (hWnd=0x101c6) returned 1 [0162.523] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.523] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0162.523] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0162.523] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.524] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.524] WaitMessage () returned 1 [0162.631] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.631] IsWindowUnicode (hWnd=0x101c6) returned 1 [0162.631] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.631] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0162.631] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0162.631] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.631] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.631] WaitMessage () returned 1 [0162.766] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.766] IsWindowUnicode (hWnd=0x101c6) returned 1 [0162.766] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.766] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0162.766] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0162.766] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.766] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.766] WaitMessage () returned 1 [0162.854] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.854] IsWindowUnicode (hWnd=0x101c6) returned 1 [0162.854] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.854] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0162.854] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0162.854] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.855] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.855] WaitMessage () returned 1 [0162.959] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.959] IsWindowUnicode (hWnd=0x101c6) returned 1 [0162.959] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0162.959] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0162.959] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0162.960] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.960] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0162.960] WaitMessage () returned 1 [0163.069] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.070] IsWindowUnicode (hWnd=0x101c6) returned 1 [0163.070] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.070] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.070] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.070] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.070] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.070] WaitMessage () returned 1 [0163.180] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.180] IsWindowUnicode (hWnd=0x101c6) returned 1 [0163.180] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.180] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.180] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.180] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.180] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.180] WaitMessage () returned 1 [0163.289] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.289] IsWindowUnicode (hWnd=0x101c6) returned 1 [0163.289] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.289] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.289] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.290] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.290] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.290] WaitMessage () returned 1 [0163.398] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.398] IsWindowUnicode (hWnd=0x101c6) returned 1 [0163.398] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.398] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.398] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.398] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.398] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.398] WaitMessage () returned 1 [0163.509] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.509] IsWindowUnicode (hWnd=0x101c6) returned 1 [0163.509] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.509] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.509] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.509] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.509] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.509] WaitMessage () returned 1 [0163.535] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.536] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a0, lParam=0x2000000) returned 0x0 [0163.536] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.538] WaitMessage () returned 1 [0163.564] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.565] IsWindowUnicode (hWnd=0x101a0) returned 1 [0163.565] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.565] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a0, lParam=0x2000002) returned 0x0 [0163.565] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.565] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.565] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xa0, wParam=0x2, lParam=0x2c02f4) returned 0x0 [0163.571] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.571] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.571] WaitMessage () returned 1 [0163.594] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.595] IsWindowUnicode (hWnd=0x101a0) returned 1 [0163.595] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.595] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a0, lParam=0x2000002) returned 0x0 [0163.596] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.596] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.596] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xa0, wParam=0x2, lParam=0x2c02c8) returned 0x0 [0163.596] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.596] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.596] WaitMessage () returned 1 [0163.629] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.629] IsWindowUnicode (hWnd=0x101a0) returned 1 [0163.629] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.632] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a0, lParam=0x2000002) returned 0x0 [0163.632] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.632] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.632] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xa0, wParam=0x2, lParam=0x2c02c6) returned 0x0 [0163.633] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.633] IsWindowUnicode (hWnd=0x101c6) returned 1 [0163.633] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.633] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.633] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.633] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.633] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.633] WaitMessage () returned 1 [0163.655] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.656] IsWindowUnicode (hWnd=0x101a0) returned 1 [0163.656] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.656] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a0, lParam=0x2000002) returned 0x0 [0163.657] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.657] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.657] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xa0, wParam=0x2, lParam=0x2c02b7) returned 0x0 [0163.657] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.657] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.657] WaitMessage () returned 1 [0163.683] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.683] IsWindowUnicode (hWnd=0x101a0) returned 1 [0163.683] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.683] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a0, lParam=0x2000002) returned 0x0 [0163.683] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.683] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.683] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xa0, wParam=0x2, lParam=0x2c02b6) returned 0x0 [0163.684] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.684] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.684] WaitMessage () returned 1 [0163.711] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.712] IsWindowUnicode (hWnd=0x101a0) returned 1 [0163.712] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.712] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a0, lParam=0x2000002) returned 0x0 [0163.712] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.712] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.712] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xa0, wParam=0x2, lParam=0x2c02b3) returned 0x0 [0163.712] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.712] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.712] WaitMessage () returned 1 [0163.725] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.725] IsWindowUnicode (hWnd=0x101c6) returned 1 [0163.725] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.725] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.725] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.725] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.725] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.725] WaitMessage () returned 1 [0163.742] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.742] IsWindowUnicode (hWnd=0x101a0) returned 1 [0163.742] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.742] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a0, lParam=0x2000002) returned 0x0 [0163.742] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.742] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.742] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xa0, wParam=0x2, lParam=0x2a02b0) returned 0x0 [0163.742] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.742] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.743] WaitMessage () returned 1 [0163.803] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.803] IsWindowUnicode (hWnd=0x101a0) returned 1 [0163.803] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.804] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a0, lParam=0x2000002) returned 0x0 [0163.804] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.804] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.804] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xa0, wParam=0x2, lParam=0x2702bb) returned 0x0 [0163.804] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.804] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.804] WaitMessage () returned 1 [0163.832] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.832] IsWindowUnicode (hWnd=0x101a0) returned 1 [0163.832] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.832] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a0, lParam=0x2000002) returned 0x0 [0163.832] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.832] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.832] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xa0, wParam=0x2, lParam=0x2602c0) returned 0x0 [0163.832] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.832] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.832] WaitMessage () returned 1 [0163.834] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.834] IsWindowUnicode (hWnd=0x101c6) returned 1 [0163.834] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.834] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.834] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.834] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.834] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.834] WaitMessage () returned 1 [0163.862] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.862] IsWindowUnicode (hWnd=0x101a0) returned 1 [0163.862] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.862] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a0, lParam=0x2000014) returned 0x0 [0163.862] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.862] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.863] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xa0, wParam=0x14, lParam=0x2602e9) returned 0x0 [0163.863] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.863] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.863] WaitMessage () returned 1 [0163.892] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.892] IsWindowUnicode (hWnd=0x101a0) returned 1 [0163.892] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.892] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a0, lParam=0x2000014) returned 0x0 [0163.892] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.892] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.892] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xa0, wParam=0x14, lParam=0x2602f2) returned 0x0 [0163.892] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.892] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.892] WaitMessage () returned 1 [0163.947] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.947] IsWindowUnicode (hWnd=0x101c6) returned 1 [0163.947] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0163.948] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0163.948] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0163.948] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.948] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0163.948] WaitMessage () returned 1 [0164.057] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0164.057] IsWindowUnicode (hWnd=0x101c6) returned 1 [0164.057] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0164.057] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0164.057] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0164.057] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0164.057] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0164.057] WaitMessage () returned 1 [0164.164] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0164.165] IsWindowUnicode (hWnd=0x101c6) returned 1 [0164.165] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0164.165] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0164.165] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0164.165] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0164.165] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0164.165] WaitMessage () returned 1 [0164.272] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0164.272] IsWindowUnicode (hWnd=0x101c6) returned 1 [0164.272] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0164.272] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0164.272] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0164.272] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0164.272] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0164.272] WaitMessage () returned 1 [0164.381] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0164.381] IsWindowUnicode (hWnd=0x101c6) returned 1 [0164.381] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0164.381] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0164.381] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0164.382] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0164.382] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0164.382] WaitMessage () returned 1 [0164.464] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0164.464] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0164.466] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0164.467] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0164.467] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0164.468] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x46, wParam=0x0, lParam=0xb7ec3c) returned 0x0 [0164.471] IsWindowUnicode (hWnd=0x101a0) returned 1 [0164.471] GetMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0164.472] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x20, wParam=0x101a0, lParam=0x2010014) returned 0x0 [0164.472] TranslateMessage (lpMsg=0xb7ed5c) returned 0 [0164.472] DispatchMessageW (lpMsg=0xb7ed5c) returned 0x0 [0164.479] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0xa1, wParam=0x14, lParam=0x2602f2) returned 0x0 [0164.516] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0164.516] GetCapture () returned 0x0 [0164.517] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x112, wParam=0xf060, lParam=0x2602f2) returned 0x0 [0164.528] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0xb7dcf4 | out: lpdwProcessId=0xb7dcf4) returned 0x77c [0164.528] GetCurrentThreadId () returned 0x77c [0164.528] IsWindow (hWnd=0x101c6) returned 1 [0164.528] KillTimer (hWnd=0x101c6, uIDEvent=0x1) returned 1 [0164.528] DestroyWindow (hWnd=0x101c6) returned 1 [0164.528] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101c6, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0164.528] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101c6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.529] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101c6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.530] GetWindowLongW (hWnd=0x101a0, nIndex=-20) returned 327945 [0164.530] DestroyWindow (hWnd=0x101a0) returned 1 [0164.530] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0164.530] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x46, wParam=0x0, lParam=0xb7dbd8) returned 0x0 [0164.531] GetWindowPlacement (in: hWnd=0x101a0, lpwndpl=0xb7d96c | out: lpwndpl=0xb7d96c) returned 1 [0164.531] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x47, wParam=0x0, lParam=0xb7dbd8) returned 0x0 [0164.531] GetClientRect (in: hWnd=0x101a0, lpRect=0xb7d91c | out: lpRect=0xb7d91c) returned 1 [0164.531] GetWindowRect (in: hWnd=0x101a0, lpRect=0xb7d91c | out: lpRect=0xb7d91c) returned 1 [0164.531] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0164.531] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0164.531] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0164.531] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0164.532] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x1c, wParam=0x0, lParam=0x8a4) returned 0x0 [0164.532] NtdllDefWindowProc_W (hWnd=0x1019c, Msg=0x1c, wParam=0x0, lParam=0x8a4) returned 0x0 [0164.532] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0164.534] GetCapture () returned 0x0 [0164.534] InvalidateRect (hWnd=0x101c4, lpRect=0x0, bErase=0) returned 1 [0164.534] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0164.534] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0164.534] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0164.549] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.549] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.549] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.549] SendMessageW (hWnd=0x101a8, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0164.549] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0164.549] SendMessageW (hWnd=0x101a8, Msg=0xb0, wParam=0x296c754, lParam=0xb7d918) returned 0x0 [0164.549] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0xb0, wParam=0x296c754, lParam=0xb7d918) returned 0x0 [0164.549] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.549] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.549] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.549] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.549] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.549] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.549] SendMessageW (hWnd=0x101b4, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0164.549] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0164.550] SendMessageW (hWnd=0x101b4, Msg=0xb0, wParam=0x296c8f4, lParam=0xb7d91c) returned 0x0 [0164.550] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0xb0, wParam=0x296c8f4, lParam=0xb7d91c) returned 0x0 [0164.550] SendMessageW (hWnd=0x101b4, Msg=0x44a, wParam=0x2, lParam=0xb7d87c) returned 0x200 [0164.550] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x44a, wParam=0x2, lParam=0xb7d87c) returned 0x200 [0164.575] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.576] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.576] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.576] SendMessageW (hWnd=0x101ba, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0164.576] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0164.576] SendMessageW (hWnd=0x101ba, Msg=0xb0, wParam=0x296b2b4, lParam=0xb7d918) returned 0x0 [0164.576] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0xb0, wParam=0x296b2b4, lParam=0xb7d918) returned 0x0 [0164.576] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.576] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.576] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.576] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.576] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.576] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.577] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101a6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.577] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101a8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.577] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a4, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.578] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101ac, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.578] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101ae, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.579] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b0, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.579] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101aa, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.579] CallWindowProcW (lpPrevWndFunc=0x710f1e0d, hWnd=0x101b4, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.580] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.580] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101b8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.581] CallWindowProcW (lpPrevWndFunc=0x7756b880, hWnd=0x101ba, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.581] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101b6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.581] CallWindowProcW (lpPrevWndFunc=0x7756b8e0, hWnd=0x101be, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.582] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c0, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.582] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101bc, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.582] CallWindowProcW (lpPrevWndFunc=0x758124ee, hWnd=0x101c2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.592] CallWindowProcW (lpPrevWndFunc=0x7756b800, hWnd=0x101c4, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.592] CallWindowProcW (lpPrevWndFunc=0x74e1bdea, hWnd=0x101a0, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.593] PeekMessageW (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb7ed5c) returned 1 [0164.593] GetMessageA (in: lpMsg=0xb7ed5c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb7ed5c) returned 0 [0164.595] GetCurrentThreadId () returned 0x77c [0164.597] EnumThreadWindows (dwThreadId=0x77c, lpfn=0x4e0394e, lParam=0x0) returned 1 [0164.597] IsWindowVisible (hWnd=0x1019c) returned 0 [0164.597] IsWindowVisible (hWnd=0x101a2) returned 0 [0164.597] IsWindowVisible (hWnd=0x1019e) returned 0 [0164.598] GetCurrentThreadId () returned 0x77c [0164.611] GetCurrentThreadId () returned 0x77c [0164.611] EnumThreadWindows (dwThreadId=0x77c, lpfn=0x4e03976, lParam=0x0) returned 1 [0164.611] IsWindowVisible (hWnd=0x1019c) returned 0 [0164.611] IsWindowVisible (hWnd=0x101a2) returned 0 [0164.611] IsWindowVisible (hWnd=0x1019e) returned 0 [0164.612] OleUninitialize () [0164.612] CloseHandle (hObject=0x21c) returned 1 [0164.613] CoGetContextToken (in: pToken=0xb7f7a8 | out: pToken=0xb7f7a8) returned 0x0 [0164.613] IUnknown:QueryInterface (in: This=0xd67550, riid=0x746f3090*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb7f7cc | out: ppvObject=0xb7f7cc*=0xd6755c) returned 0x0 [0164.613] IComThreadingInfo:GetCurrentThreadType (in: This=0xd6755c, pThreadType=0xb7f82c | out: pThreadType=0xb7f82c*=1) returned 0x0 [0164.613] IUnknown:Release (This=0xd6755c) returned 0x0 [0164.614] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0xd33af0*=0xf8, lpdwindex=0xb7f64c | out: lpdwindex=0xb7f64c) returned 0x0 Thread: id = 17 os_tid = 0x5c8 Thread: id = 18 os_tid = 0x5e0 [0150.713] CoGetContextToken (in: pToken=0x288f98c | out: pToken=0x288f98c) returned 0x800401f0 [0150.713] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0150.713] RoInitialize () returned 0x1 [0150.713] RoUninitialize () returned 0x1 [0164.622] SetWindowLongW (hWnd=0x200ee, nIndex=-4, dwNewLong=1960951274) returned 81790478 [0164.622] SetClassLongW (hWnd=0x200ee, nIndex=-24, dwNewLong=1960951274) returned 0x4e005e6 [0164.622] PostMessageW (hWnd=0x200ee, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0164.625] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0164.625] UnregisterClassW (lpClassName="WindowsForms10.Window.0.app.0.2bf8098_r11_ad1", hInstance=0x990000) returned 1 [0164.625] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0164.625] UnregisterClassW (lpClassName="WindowsForms10.msctls_progress32.app.0.2bf8098_r11_ad1", hInstance=0x990000) returned 1 [0164.625] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0164.625] UnregisterClassW (lpClassName="WindowsForms10.RichEdit20W.app.0.2bf8098_r11_ad1", hInstance=0x990000) returned 1 [0164.625] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0164.625] UnregisterClassW (lpClassName="WindowsForms10.BUTTON.app.0.2bf8098_r11_ad1", hInstance=0x990000) returned 1 [0164.626] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0164.626] UnregisterClassW (lpClassName="WindowsForms10.EDIT.app.0.2bf8098_r11_ad1", hInstance=0x990000) returned 1 [0164.626] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0164.626] UnregisterClassW (lpClassName="WindowsForms10.STATIC.app.0.2bf8098_r11_ad1", hInstance=0x990000) returned 1 [0164.626] GetModuleHandleW (lpModuleName=0x0) returned 0x990000 [0164.626] UnregisterClassW (lpClassName="WindowsForms10.Window.8.app.0.2bf8098_r11_ad1", hInstance=0x990000) returned 0 [0164.628] IsWindow (hWnd=0x1019c) returned 1 [0164.628] GetModuleHandleW (lpModuleName="user32.dll") returned 0x75be0000 [0164.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x288f740, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcWÍrv3ÏÏÈ\x8bnt¨ù\x88\x02ü¼Ár\x8c÷\x88\x02", lpUsedDefaultChar=0x0) returned 14 [0164.629] GetProcAddress (hModule=0x75be0000, lpProcName="DefWindowProcW") returned 0x74e1bdea [0164.629] SetWindowLongW (hWnd=0x1019c, nIndex=-4, dwNewLong=1960951274) returned 81790558 [0164.629] SetClassLongW (hWnd=0x1019c, nIndex=-24, dwNewLong=1960951274) returned 0x4e0065e [0164.629] IsWindow (hWnd=0x1019c) returned 1 [0164.630] DestroyWindow (hWnd=0x1019c) returned 0 [0164.638] PostMessageW (hWnd=0x1019c, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0164.639] SetConsoleCtrlHandler (HandlerRoutine=0x4e00636, Add=0) returned 1 [0164.639] DeleteObject (ho=0x30080588) returned 1 [0164.639] DeleteObject (ho=0x1105058b) returned 1 [0164.644] DestroyCursor (hCursor=0x60195) returned 1 [0164.655] GdipDeleteRegion (region=0x50299e8) returned 0x0 [0164.655] GdipDeleteMatrix (matrix=0x5013670) returned 0x0 [0164.655] GdipDeleteRegion (region=0x50186d8) returned 0x0 [0164.655] GdipDeleteFont (font=0x5013648) returned 0x0 [0164.656] GdipDeleteRegion (region=0x5018c28) returned 0x0 [0164.656] DeleteObject (ho=0xd0a06eb) returned 1 [0164.660] DeleteObject (ho=0x180a058d) returned 1 [0164.660] DeleteObject (ho=0x570a0582) returned 1 [0164.660] DeleteObject (ho=0x20a0583) returned 1 [0164.660] GdipDeleteFont (font=0x28bef40) returned 0x0 [0164.661] GdipDeleteFont (font=0x28b1f08) returned 0x0 [0164.661] DeleteObject (ho=0x5a0a06d6) returned 1 [0164.672] RestoreDC (hdc=0xd010694, nSavedDC=-1) returned 1 [0164.673] DeleteDC (hdc=0xd010694) returned 1 [0164.674] GdipDeleteFont (font=0x28bef18) returned 0x0 [0164.676] EtwEventUnregister (RegHandle=0xd3a4a0) returned 0x0 [0164.676] UnmapViewOfFile (lpBaseAddress=0x5110000) returned 1 [0164.676] CloseHandle (hObject=0x308) returned 1 [0164.676] RegCloseKey (hKey=0x294) returned 0x0 [0164.682] CloseHandle (hObject=0x218) returned 1 [0164.682] RegCloseKey (hKey=0x80000004) returned 0x0 [0164.704] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 19 os_tid = 0x5d8 Thread: id = 20 os_tid = 0x8b8 Thread: id = 21 os_tid = 0x8bc Thread: id = 22 os_tid = 0x8c0 Thread: id = 23 os_tid = 0x8c8